3 ms·
It'd be interesting to have the kernel transparently encrypt the secret page whenever the process is put to sleep or waiting for IO, so that the contents are on
by m_eiman 7y ago
It'd be interesting to have the kernel transparently encrypt the secret page whenever the process is put to sleep or waiting for IO, so that the contents are only readable when the process is active. Could be a nice, if not perfect, layer of protection against having the secrets read from other processes. IIRC there's a way to store crypto keys in CPU registers, so that they won't be available in a RAM dump.
- saagarjha 7y agoYou'd have to find a way to pin the keys in the registers, lest they be put in RAM during a context switch.
- tom_mellior 7y agoThat's OK if your threat model trusts the kernel and only wants to protect against speculative execution attacks within the application itself. While the application is running, they keys will only ever be accessed from registers -- context switches are transparent to the application.
- m_eiman 7y agoYes, but there are debug registers that can be used for this. https://news.ycombinator.com/item?id=11022275 https://news.ycombinator.com/item?id=11022275