[PATCH 3/5] KEYS: encrypted: sanitize all key material

David Howells dhowells at redhat.com
Mon Apr 24 14:14:54 UTC 2017


Eric Biggers <ebiggers3 at gmail.com> wrote:

> It's not actually needed because it's impossible for the compiler to optimize
> away the memset().  memzero_explicit() is only needed on stack data.

Okay, also reasonable.

David
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html



More information about the Linux-security-module-archive mailing list