[110349] in cryptography@c2.net mail archive
Re: More on in-memory zeroisation
daemon@ATHENA.MIT.EDU (Thierry Moreau)
Mon Dec 10 10:31:39 2007
Date: Mon, 10 Dec 2007 02:47:41 -0500
From: Thierry Moreau <thierry.moreau@connotech.com>
To: Peter Gutmann <pgut001@cs.auckland.ac.nz>
CC: cryptography@metzdowd.com
In-Reply-To: <E1J1FSg-0004Op-Uy@wintermute01.cs.auckland.ac.nz>
Peter Gutmann wrote:
> There was a discussion on this list a year or two back about problems in using
> memset() to zeroise in-memory data, specifically the fact that optimising
> compilers would remove a memset() on (apparently) dead data in the belief that
> it wasn't serving any purpose.
>
Then, s/memset(?,0,?)/(memset)(?,0,?)/ to get rid of compiler in-lining.
Ref: ANSI X3.159-1989, section 4.1.6 (Use of C standard library functions)
--
- Thierry Moreau
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
