4 ms·
Nice teaser at the end there. Does it have something to do with the fact that the OS may have paged the memory containing the sensitive data to disk?
by defen 12y ago
Nice teaser at the end there. Does it have something to do with the fact that the OS may have paged the memory containing the sensitive data to disk?
- cperciva 12y agoPart 2 should be up tomorrow. ;-) But no, I'm not talking about VM paging.
- jacquesm 12y agoCoredumps?
- schoen 12y agoOS/language runtine should provide cryptographic key management routines that are correct in the OS/device context?
- jacquesm 12y agoSure, but programs can crash (or you can attempt to make them crash) and then your keys are sitting there unprotected in a coredump. Anyway, I'm curious if that's the situation Colin was thinking about or not. That would seem to be quite hard to protect against. The example Colin gave was one that is definitely not at the OS / Library level. Though maybe you're right and that's where the solution to all this lies.
- dsjoerg 12y agoI figured the article would be about how you have to write random data to the buffer to truly "zero" it, otherwise the ghost of the data can still be read using some trick.
- Dylan16807 12y agoMain memory decays in milliseconds.
- alexforster 12y agoI'm hoping it'll be an allusion to Rust and an article about how none of this nonsense is necessary, but I don't think so based on his past writing.