Can we de/serialize in Python instead of C?

[jMyles]

Currently, we have serialize and deserialize functions written in C.

I'm of the mind that, in order to minimize the risk of heartbleed-esque side-channel attacks, it makes sense to write as much of the interfaces for our PRE as possible in Python instead of C.

However unlikely, isn't it possible that serialize can be attacked by a buffer-overflow that we haven't considered?

It is possible to write this in pure python?

[tuxxy]

There isn't much in attack surface in those functions. It would also be pretty trivial to prevent this attack too (some simple bounds checking).