qemu-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Qemu-devel] [PATCH v2 3/7] crypto: clear out buffer after timing pb


From: Eric Blake
Subject: Re: [Qemu-devel] [PATCH v2 3/7] crypto: clear out buffer after timing pbkdf algorithm
Date: Mon, 12 Sep 2016 10:39:54 -0500
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0

On 09/12/2016 09:13 AM, Daniel P. Berrange wrote:
> The 'out' buffer will hold a key derived from master
> password, so it is best practice to clear this buffer
> when no longer required.

Still might be worth an explicit mention that we are currently not going
to worry about even tougher protections against copies stored in swap.

> 
> Signed-off-by: Daniel P. Berrange <address@hidden>
> ---
>  crypto/pbkdf.c | 13 +++++++++----
>  1 file changed, 9 insertions(+), 4 deletions(-)
> 

Reviewed-by: Eric Blake <address@hidden>

-- 
Eric Blake   eblake redhat com    +1-919-301-3266
Libvirt virtualization library http://libvirt.org

Attachment: signature.asc
Description: OpenPGP digital signature


reply via email to

[Prev in Thread] Current Thread [Next in Thread]