[111113] in cryptography@c2.net mail archive
Re: More on in-memory zeroisation
daemon@ATHENA.MIT.EDU (Peter Gutmann)
Tue Dec 18 21:35:17 2007
From: pgut001@cs.auckland.ac.nz (Peter Gutmann)
To: bmoeller@acm.org, pgut001@cs.auckland.ac.nz
Cc: cryptography@metzdowd.com
In-Reply-To: <20071217114827.GA21502@tau.invalid>
Date: Tue, 18 Dec 2007 00:52:13 +1300
Bodo Moeller <bmoeller@acm.org> writes:
>On Sun, Dec 09, 2007 at 07:16:22PM +1300, Peter Gutmann wrote:
>> There was a discussion on this list a year or two back about problems in using
>> memset() to zeroise in-memory data, specifically the fact that optimising
>> compilers would remove a memset() on (apparently) dead data in the belief that
>> it wasn't serving any purpose.
>
>Actually this problem was discussed five years ago (October 2002) on the
>vuln-dev mailing list:
When I said "a year or two" I meant for large values of two.
Peter.
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
