[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ft-devel] Potential Timing Side-channel in Freetype Library

From: Werner LEMBERG
Subject: Re: [ft-devel] Potential Timing Side-channel in Freetype Library
Date: Mon, 04 Mar 2019 06:12:00 +0100 (CET)

>> The suggestion to load the script's Unicode block as a whole in
>> advance sounds like a good suggestion – for passwords and the like
>> you only need a single font at a single size, so this should be
>> manageable.  For CJK scripts and the like, the number of available
>> glyphs probably prevents easy password recognition anyway, I think.
> We think the idea of loading multiple glyphs is interesting.
> However, according to our understanding of the graphic libraries,
> the glyph caching is often performed by other libraries, (e.g. SKIA
> on Android).  It's unclear if we do this for Freetype, what would be
> the impact of other libraries that uses Freetype.

I don't see any impact.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]