4 ms·
I evaluated but didn't adopt https://github.com/awnumar/memguard https://github.com/awnumar/memguard in Go. No matter how well-implemented and reliable it is, I
by networked 11mo ago
I evaluated but didn't adopt https://github.com/awnumar/memguard https://github.com/awnumar/memguard in Go.
No matter how well-implemented and reliable it is, I can't pass its secrets to https://github.com/FiloSottile/age https://github.com/FiloSottile/age.
I assume all process memory may contain residual secrets.
As a mitigation in a password manager and an encrypted file editor, I prevent process memory from being swapped to disk with https://pkg.go.dev/syscall#Mlockall https://pkg.go.dev/syscall#Mlockall.