Uploaded image for project: 'Libmongocrypt'
  1. Libmongocrypt
  2. MONGOCRYPT-89

Securely allocate buffers for storing decrypted key material

    XMLWordPrintableJSON

Details

    • Icon: Task Task
    • Resolution: Won't Fix
    • Icon: Major - P3 Major - P3
    • None
    • None
    • None
    • None

    Description

      In the driver spec we've decided we want to make a best-effort to store decrypted key material securely in memory. In libmongocrypt, we can store cached decrypted key material in buffers allocated securely (i.e. don't get paged to disk and are zeroed out when freed). We have server code that already does this apparently.

      Attachments

        Activity

          People

            Unassigned Unassigned
            kevin.albertson@mongodb.com Kevin Albertson
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: