Re: Usage of memset to eradicate string content

Tor Lillqvist <tml -AT- iki.fi>
Thu, 23 Aug 2012 23:15:12 +0300

But if the password is used to load or save encrypted documents, then the
contents of the document (which the so carefully erased password protects)
is loaded into memory in plain-text, and is equally readable by an
adversary that has access to the virtual memory of your process, and might
get paged out to disk. So what's the win?

--tml

Context

Usage of memset to eradicate string content · Arnaud Versini
- Re: Usage of memset to eradicate string content · Tor Lillqvist
  - Re: Usage of memset to eradicate string content · Michael Stahl
    - Re: Usage of memset to eradicate string content · Tor Lillqvist
      - Re: Usage of memset to eradicate string content · Michael Stahl
        
        Re: Usage of memset to eradicate string content · Tor Lillqvist
- Re: Usage of memset to eradicate string content · Caolán McNamara
  - Re: Usage of memset to eradicate string content · Michael Stahl
    - Re: Usage of memset to eradicate string content · Arnaud Versini
      - [RESOLVED] Re: Usage of memset to eradicate string content · Caolán McNamara

Privacy Policy | Impressum (Legal Info) | Copyright information: Unless otherwise specified, all text and images on this website are licensed under the Creative Commons Attribution-Share Alike 3.0 License. This does not include the source code of LibreOffice, which is licensed under the Mozilla Public License (MPLv2). "LibreOffice" and "The Document Foundation" are registered trademarks of their corresponding registered owners or are in actual use as trademarks in one or more countries. Their respective logos and icons are also subject to international copyright laws. Use thereof is explained in our trademark policy.