libgocryptfs/internal/cryptocore
Jakob Unterwurzacher 0c520845f3 main: purge masterkey from memory as soon as possible
Remove the "Masterkey" field from fusefrontend.Args because it
should not be stored longer than neccessary. Instead pass the
masterkey as a separate argument to the filesystem initializers.

Then overwrite it with zeros immediately so we don't have
to wait for garbage collection.

Note that the crypto implementation still stores at least a
masterkey-derived value, so this change makes it harder, but not
impossible, to extract the encryption keys from memory.

Suggested at https://github.com/rfjakob/gocryptfs/issues/137
2017-08-11 19:02:26 +02:00
..
cryptocore_test.go macos: make testing without openssl work properly 2017-07-14 23:22:15 +02:00
cryptocore.go main: purge masterkey from memory as soon as possible 2017-08-11 19:02:26 +02:00
hkdf_test.go cryptocore: improve comments and add tests for hkdfDerive 2017-05-27 14:41:20 +02:00
hkdf.go cryptocore: improve comments and add tests for hkdfDerive 2017-05-27 14:41:20 +02:00
nonce.go cryptocore: prefetch nonces in 512-byte blocks 2017-06-09 22:05:14 +02:00
randprefetch_test.go cryptocore: prefetch nonces in 512-byte blocks 2017-06-09 22:05:14 +02:00
randprefetch.go cryptocore: prefetch nonces in the background 2017-06-11 21:29:50 +02:00