[tor-bugs] #7003 [Tor Relay]: Wipe relay key material from memory on common crash conditions

[Tor Bug Tracker & Wiki]

#7003: Wipe relay key material from memory on common crash conditions
---------------------------------------------+------------------------------
 Reporter:  mikeperry                        |          Owner:                    
     Type:  enhancement                      |         Status:  new               
 Priority:  major                            |      Milestone:  Tor: 0.2.4.x-final
Component:  Tor Relay                        |        Version:                    
 Keywords:  MikePerry201212,  small-feature  |         Parent:  #5456             
   Points:                                   |   Actualpoints:                    
---------------------------------------------+------------------------------

Comment(by nickm):

 I've heard worse ideas. I'd want the code here to be absolutely
 bulletproof, and to get invoked as part of our regular shutdown logic (so
 that it would see some testing).

 This "common crash conditions" idea is one where I'd like to see what you
 have in mind enumerated.

 We might need to ignore Libevent's regular signal logic, since it isn't
 meant for signals that have put an unknown portion of the process into a
 non-runnable state.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7003#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online