[tor-bugs] #13477 [Tor]: Memwipe more keys after tor is finished using them

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Oct 19 16:08:48 UTC 2014


#13477: Memwipe more keys after tor is finished using them
------------------------+------------------------------
     Reporter:  teor    |      Owner:
         Type:  defect  |     Status:  needs_review
     Priority:  normal  |  Milestone:
    Component:  Tor     |    Version:  Tor: unspecified
   Resolution:          |   Keywords:  tor-router easy
Actual Points:          |  Parent ID:
       Points:          |
------------------------+------------------------------
Changes (by teor):

 * keywords:  tor-router => tor-router easy
 * status:  new => needs_review


Comment:

 I've created a git branch for this bug:
 Branch: memwipe-more-keys
 Repository: ​​​​​https://github.com/teor2345/tor.git

 It's a single commit which switches out memset for memwipe in two lines,
 one in each of crypto_digest_get_digest and
 init_curve25519_keypair_from_file.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13477#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list