[2446] in Kerberos
Why zero out key variables?
daemon@ATHENA.MIT.EDU (Jim Miller)
Wed Dec 9 16:42:34 1992
From: jim@bilbo.suite.com (Jim Miller)
Date: Wed, 9 Dec 92 15:16:58 -0600
To: kerberos@MIT.EDU
Reply-To: Jim_Miller@suite.com
I've been playing around the source code for Kerberos V4 and I notice
that in many places that program variables that are used to hold
encryption keys are zeroed out immediately after use. Also, some
(but not all) of the buffers that are used to hold tickets are also
zeroed out after use.
Why is this done? Especially considering the fact the tickets are
written to the file system. Is the file system more secure than a
process's memory space?
Jim-Miller@Suite.COM
