2 ms·

I think it depends how you translate the locking analog. E.g. decrypting your key with {gpg,ssh}-agent keeps the plaintext key in memory in the agent. If the ma

I think it depends how you translate the locking analog. E.g. decrypting your key with {gpg,ssh}-agent keeps the plaintext key in memory in the agent. If the machine reboots or a timeout elapses, the memory is cleared and the key has to be unlocked again.

alister 7y ago
On-the-fly encryption, Truecrypt as the canonical example, has this property too. The key is always in memory, decrypting text on the fly, but a reboot or period of inactivity will wipe the key.