btrask / stronglink

A searchable, syncable, content-addressable notetaking system
Other
1.04k stars 45 forks source link

Use explicit_bzero to clear sensitive buffers after use #95

Open btrask opened 8 years ago

btrask commented 8 years ago

In any case of a function that expects a sensitive buffer (password or key), we should probably accept a pointer to a mutable buffer and zero it before the function returns...?

Or alternately, just clear it at the top level after the call returns.