-
Notifications
You must be signed in to change notification settings - Fork 81
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Document relationship to Project Safe Transmute #480
Comments
I don't want to mess up your issue tracker by talking about my own needs too much, so I left a comment in the ring-specific issue: #450 (comment). Basically, the suggestion is more clearly delineate/separate the safe transmute aspect of zerocopy from the packet parsing, endian processing, and convenience stuff. I hope I explained why such separation is useful for ring and probably other crypto libraries, though I've no idea how practical it is. |
@briansmith, author of ring, wrote the following:
It is problematic for both Project Safe Transmute and crates like zerocopy that the announcement of Project Safe Transmute has had a chilling effect on the adoption of safer abstractions over transmutation. Project Safe Transmute relies on the adoption of these third-party crates to inform its design process. Moreover, it is unlikely that the work of Project Safe Transmute will supplant the need for these third-party crates.
The current plan of record for Project Safe Transmute will produce a low-level feature which supports the soundness analysis currently implemented by our custom derives. Eventually, crates like zerocopy will be able to transparently replace their bespoke soundness analyses with the one provided by Project Safe Transmute.
However, Project Safe Transmute won't replace most of the higher-level abstractions in zerocopy itself. For the foreseeable future, crates like zerocopy will still be required in order to provide these higher-level abstractions on top of the building block provided by Project Safe Transmute. For many higher-level use cases, Project Safe Transmute will provide the foundation on which users can prove the soundness of their
unsafe
code, but it will not obviate the need to writeunsafe
code itself.Our documentation should clearly describe the relationship of zerocopy to Project Safe Transmute, noting:
The text was updated successfully, but these errors were encountered: