4 ms·
Don't set a constant poison, the attacker will just overwrite the poison with A5s. Generate a random byte on start-up.
by shenberg 11y ago
Don't set a constant poison, the attacker will just overwrite the poison with A5s. Generate a random byte on start-up.
- chillingeffect 11y agoI like your random byte on start-up concept btw. For the truly paranoid, the compiler must be re-written so that bits within the stack words must remain unutilized and the remaining bits include a cryptographically-signed bit field. E.g. a 32-bit machine can allocate 8 bits of each word for application data and 24 bits for authentication.