Results 14 comments of sdrapkin

Hi @dsmeltz, does this example help? [Linqpad] ```csharp async Task Main() { string connString = "Server=.\\SQL2019;Database=TempDB;Trusted_Connection=True;"; var db = DbContext.Create(connString); var rows = await db.QueryAsync("SELECT * FROM SYS.OBJECTS;"); var pocoArray...

I've been watching `Microsoft.Data.SqlClient` (MDS) project for a while. Some concerns/questions it raises: - Should libraries switch from `System.Data.SqlClient` (SDS) to MDS? Supporting SDS only would limit some (niche) features,...

I have a few not-very-strong arguments against IDb* changes: - IDb* is not granular enough to indicate Sql* compatibility - ie. any other provider will compile but likely fail at...

> is CryptoRandom in this library different from main lib (SecurityDriven.Inferno) and how? Yes, they are different. [SecurityDriven.Inferno] has been designed for .NET Framework 4.x (on Windows) many years ago,...

@macsux Unfortunately it is very unlikely to be merged into core .NET. Microsoft has decided to maintain backward compatibility, and will keep old broken implementation (.NET 5 and below) for...

@bartonjs Thx for reviewing. Is it by design that `NETCOREAPP2_1` has no API which converts a byte array into `ECDiffieHellmanPublicKey`? Especially given than the reverse API that converts `ECDiffieHellmanPublicKey` into...

> I won't say that there's not room for improvement, but netcoreapp21 made ECDH be possible, if not nice :). Indeed - no complaints here. In terms of future improvement...

@blowdart, @bartonjs, @codesinchaos, @jedisct1

@jedisct1 I get your point, but my question is about the confines of a safe, managed .NET environment (ie. JIT, GC, and all the other attributes of NETFRAMEWORK & NETCORE).

@henning-krause `CryptographicOperations.FixedTimeEquals` doesn't do anything [special](https://github.com/dotnet/corefx/blob/63cfd9ebb28533078b69daf16287dee1e1daef22/src/System.Security.Cryptography.Primitives/src/System/Security/Cryptography/CryptographicOperations.cs#L32) - it's `OrSub`. Inferno already provides `Xor`-based constant-time comparison API. The new thing to me is recent Microsoft claims that `OrSub`-based approach is deemed...