Clearing sensitive in-memory data in perl

[Jason Holt]

On Mon, 12 Sep 2005, Sidney Markowitz wrote:

> Does anyone know of an open source crypto package written in perl that is 
> careful to try to clear sensitive data structures before they are released to 
> the garbage collector?
[...]

Securely deleting secrets is hard enough in C, much less high level languages. 
I've often considered trying to write a C-based module for secret storage, but 
it's problematic (although the Taint stuff looks promising) and to my 
knowledge has never been done.

 							-J

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com