Skip to content
Snippets Groups Projects
  1. Jan 13, 2016
  2. Jan 08, 2016
  3. Jan 07, 2016
  4. Dec 31, 2015
  5. Dec 28, 2015
  6. Dec 11, 2015
  7. Dec 10, 2015
  8. Dec 09, 2015
  9. Dec 08, 2015
  10. Nov 30, 2015
  11. Apr 29, 2015
  12. Jan 14, 2015
  13. Dec 29, 2014
    • akwizgran's avatar
      Don't try to erase secrets from memory. · 358166bc
      akwizgran authored
      1. The things we're really trying to protect - contact identities,
      message contents, etc - can't be erased from memory because they're
      encapsulated inside objects we don't control.
      
      2. Long-term secrets can't be protected by erasing them from memory
      because they're stored in the database and the database key has to be
      held in memory whenever the app's running.
      
      3. If the runtime uses a compacting garbage collector then we have no
      way to ensure an object is erased from memory.
      
      4. Trying to erase secrets from memory makes the code more complex.
      
      Conclusion: Let's not try to protect secrets from an attacker who can
      read arbitrary memory locations.
      358166bc
  14. Apr 30, 2014
  15. Apr 07, 2014
  16. Apr 05, 2014
  17. Mar 10, 2014
  18. Mar 02, 2014
  19. Mar 01, 2014
  20. Feb 11, 2014
  21. Feb 09, 2014
  22. Feb 05, 2014
Loading