libgocryptfs/internal/fusefrontend_reverse
Jakob Unterwurzacher 0c520845f3 main: purge masterkey from memory as soon as possible
Remove the "Masterkey" field from fusefrontend.Args because it
should not be stored longer than neccessary. Instead pass the
masterkey as a separate argument to the filesystem initializers.

Then overwrite it with zeros immediately so we don't have
to wait for garbage collection.

Note that the crypto implementation still stores at least a
masterkey-derived value, so this change makes it harder, but not
impossible, to extract the encryption keys from memory.

Suggested at https://github.com/rfjakob/gocryptfs/issues/137
2017-08-11 19:02:26 +02:00
..
ctlsock_interface.go fusefrontend_reverse: move pathiv to its own package 2017-05-30 17:04:46 +02:00
reverse_longnames.go nametransform: add Dir() function 2017-08-06 23:14:39 +02:00
rfile.go pathiv: move block IV algorithm into this package 2017-05-30 17:04:46 +02:00
rfs.go main: purge masterkey from memory as soon as possible 2017-08-11 19:02:26 +02:00
rpath.go nametransform: add Dir() function 2017-08-06 23:14:39 +02:00
rpath_cache.go fusefrontend_reverse: convert fmt.Printf calls to tlog 2017-04-01 15:49:53 +02:00
virtualfile.go nametransform: add Dir() function 2017-08-06 23:14:39 +02:00