[rastignack]

In rust with some C code, ok. How is the DER format parsed for example ?

Regarding crypto operations, I know as of now for rust projects assembly is a must to have constant time guarantees.

Maybe there could be a way with intrinsics and a constant-time marker, similar to unsafe, to use pure rust.

In the meantime I think there still is too much C code.

It’s a great step in the good direction by the way.

[jaas]

In Rustls, DER, and all certificate parsing and validation in general, is done in Rust.

https://github.com/rustls/webpki