libgocryptfs/internal/fusefrontend
Jakob Unterwurzacher 0c520845f3 main: purge masterkey from memory as soon as possible
Remove the "Masterkey" field from fusefrontend.Args because it
should not be stored longer than neccessary. Instead pass the
masterkey as a separate argument to the filesystem initializers.

Then overwrite it with zeros immediately so we don't have
to wait for garbage collection.

Note that the crypto implementation still stores at least a
masterkey-derived value, so this change makes it harder, but not
impossible, to extract the encryption keys from memory.

Suggested at https://github.com/rfjakob/gocryptfs/issues/137
2017-08-11 19:02:26 +02:00
..
args.go main: purge masterkey from memory as soon as possible 2017-08-11 19:02:26 +02:00
ctlsock_interface.go fusefrontend: implement path decryption via ctlsock 2017-05-07 21:01:39 +02:00
file.go fusefrontend: doRead: skip decryption for an empty read 2017-07-02 16:02:13 +02:00
file_allocate_truncate.go fusefrontend: Read: use provided buffer 2017-06-30 23:11:38 +02:00
file_holes.go fusefrontend: truncateGrowFile: avoid createHeader() call 2017-03-12 21:06:59 +01:00
fs.go main: purge masterkey from memory as soon as possible 2017-08-11 19:02:26 +02:00
fs_dir.go nametransform: harden name decryption against invalid input 2017-05-23 21:26:38 +02:00
names.go nametransform: delete unused function DecryptPathDirIV 2016-09-25 18:56:23 +02:00