Bug: sensitive data written to insecure memory

Marlow, Andrew (London) MarloAnd at exchange.uk.ml.com
Thu Apr 5 12:02:10 CEST 2001


> -----Original Message-----
> From:	Oleg Smolsky [SMTP:small at clear.net.nz]
> Sent:	Friday, April 06, 2001 4:39 AM
> To:	gnupg-devel at gnupg.org
> Subject:	Re[2]: Bug: sensitive data written to insecure memory
> 
> On Wed, 4 Apr 2001, Werner Koch <wk at gnupg.org> wrote:
> > Given  all the problems with the "secure memory" handling, the extra
> > complexity  of  the  code,  the  problem of hibernation ("suspend to
> > disk"),  the unavailibilty of "secure memory" under Windoze and many
> > other  systems,  we  might  come  to the conclusion that this design
> > issue  was  an  error and we should better rely on the OS to protect
> > the swap space.
> 
> Actually, it's really easy to 
	[SNIP]

	Sounds like an OS issue to me. Just my $0.02.

	-Andrew M.





More information about the Gnupg-devel mailing list