Colin Percival personal blog

Zeroing buffers is insufficient

With a bit of care and a cooperative compiler, we can zero a buffer — but that's not what we need. What we need to do is zero every location where sensitive data might be stored. Remember, the whole reason we had sensitive information in memory in the first place was so that we could use it; and that usage almost…
Points
299
HN comments
130
Submissions
1
Cited by
3 commenters

Software EngineeringSecurity & Privacy2014

On Hacker News

SubmittedTitle on HNPointsComments
Sep 6, 2014Zeroing buffers is insufficient by MartinodF299130

Cited in comments

Linked from 3 Hacker News comments by 3 different people, from Sep 2014 to Feb 2019.

Most recent:

Search every comment that links here →

More from Colin Percival

All 60 posts →

Related posts from the same era