Re[2]: Bug: sensitive data written to insecure memory

Marlow, Andrew (London) MarloAnd@exchange.uk.ml.com
Thu Apr 5 11:02:10 2001



> -----Original Message-----
> From: Oleg Smolsky [SMTP:small@clear.net.nz]
> Sent: Friday, April 06, 2001 4:39 AM
> To: gnupg-devel@gnupg.org
> Subject: Re[2]: Bug: sensitive data written to insecure memory
>
> On Wed, 4 Apr 2001, Werner Koch <wk@gnupg.org> wrote:
> > Given all the problems with the "secure memory" handling, the extra
> > complexity of the code, the problem of hibernation ("suspend to
> > disk"), the unavailibilty of "secure memory" under Windoze and many
> > other systems, we might come to the conclusion that this design
> > issue was an error and we should better rely on the OS to protect
> > the swap space.
>
> Actually, it's really easy to
[SNIP] Sounds like an OS issue to me. Just my $0.02. -Andrew M.