Feature #3121
migrate secrets handling to unmanaged C code for more reliable zeroizing
Status: | New | Start date: | 03/25/2014 | |
---|---|---|---|---|
Priority: | Normal | Due date: | ||
Assignee: | - | % Done: | 0% | |
Category: | - | |||
Target version: | 0.2 | |||
Component: |
Description
With our Wiper class, we currently make a good attempt, using reflection, to wipe sensitive data inside the JVM. But due to memory relocation during garbage collection in the JVM, we can't be sure copies of data haven't been made inadvertently.
To solve this we can create C helpers that manage sensitive data in real memory. NIO Direct Byte Buffers might be useful here.