[tor-bugs] #13477 [Tor]: Memwipe more keys after tor is finished using them

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Oct 20 15:13:56 UTC 2014


#13477: Memwipe more keys after tor is finished using them
------------------------+--------------------------------
     Reporter:  teor    |      Owner:
         Type:  defect  |     Status:  closed
     Priority:  normal  |  Milestone:  Tor: 0.2.6.x-final
    Component:  Tor     |    Version:  Tor: unspecified
   Resolution:  fixed   |   Keywords:  tor-router easy
Actual Points:          |  Parent ID:
       Points:          |
------------------------+--------------------------------
Changes (by nickm):

 * status:  needs_review => closed
 * resolution:   => fixed


Comment:

 Merged it, though I think that the router.c one is probably safe as a
 memset: keys_out is not used if we return an error from
 init_curve25519_keypair_from_file, is it?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13477#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list