search

rsandhu1 / datafabric-griffin

Automatically exported from code.google.com/p/datafabric-griffin
0 stars 0 forks source link

don't store SSH key data in Java String (convert to byte[]) #2

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
Analoguely to issue #1, base64KeyString in 
au.org.arcs.griffin.filesystem.FileSystem.createFileSystemConnectionWithPublicKe
y() needs to be converted from a Java String to a byte[]

What is the expected output? What do you see instead?

The destructor finalize() method also then needs to "wipe" the byte[] with zero 
bytes before garbage collection.

Original issue reported on code.google.com by guy.kl...@gmail.com on 4 Dec 2012 at 1:20

GoogleCodeExporter commented 8 years ago 
The key stored is just the *public* key, so no security issues involved here.

Original comment by guy.kl...@gmail.com on 4 Dec 2012 at 2:14