sdrapkin

Constant-time comparison: which approach is best?

8

## Which approach is best? `AndEq` approach, used by [internal](https://referencesource.microsoft.com/#System.Web/Security/Cryptography/CryptoUtil.cs,de48632ccae97d0b,references) and [public](https://github.com/aspnetwebstack/aspnetwebstack/blob/master/src/System.Web.Helpers/Crypto.cs#L161) Microsoft helpers: ```csharp static bool AndEq(byte[] a, byte[] b) { bool f = a.Length == b.Length; for (int...

ECDiffieHellman code in NETCOREAPP2_1 is inefficient & complex - can it be improved?

4

[ECDiffieHelman :: GetSharedSecret](https://github.com/sdrapkin/SecurityDriven.Inferno/blob/9eab7896abed4f58577b1c2a6a4895d654c61711/Extensions/CngKeyExtensions.cs#L49) @bartonjs The `NETCOREAPP2_1` code to use `ECDiffieHellman` to derive a shared secret from a private `CngKey` and a public `CngKey` is very messy/complicated, compared to `NET462` code....

Dump() not working with uncapsulated List<T>

5

```csharp void Main() // LinqPad 6 v6.9.7 x64 beta { var list = new List { "hello" }; var uncapsulatedList = list.Uncapsulate(); uncapsulatedList.Dump(); // private "_items" array is not shown...