RWC 2017 - Erasing Secrets from RAM
Unknown (noreply@blogger.com)
One of my favourite talks from the Real World Crypto 2017 conference was given by Laurent Simon, on Erasing Secrets from RAM. In short, it was found that in practice, many non-malicious programs handling keys and other sensitive data do not erase the RAM correctly. This would allow an attacker (that has access to all of a system's volatile memory and CPU state) access to any unerased sensitive data. It was thought that compiler optimisation played a part in the lack of erasion. Take the code bel
