This commit is contained in:
Hannes Mehnert 2017-09-16 22:52:27 +01:00
parent fae50e7cb7
commit 9b93a54777

View file

@ -91,6 +91,18 @@ virtual machine, since only the required libraries are linked into the virtual
machine image. By avoiding superfluous code we decrease the attack surface
immensly.
As example, the lines of code of the [Bitcoin Piñata](/Projects/Pinata) compared
to a Linux and OpenSSL based one:
| Linux | MirageOS
-- | -- | --
Kernel | 1600 | 48
Runtime | 689 | 25
Crypto | 230 | 23
TLS | 41 | 6
-- | -- | --
Total | 2560 | 102
TODO: Example: lines of code / binary size fuer zb dns server / dhcp server
The choice of programming language avoids several attack vectors. Immutable data