canmove, Confirmed users
937
edits
VE 07KeyMgmt: Difference between revisions
Jump to navigation
Jump to search
→Key Zeroization
| Line 133: | Line 133: | ||
(<code>PR_Free()</code> calls the Standard C library function <code>free()</code> to free memory allocated from the heap.) | (<code>PR_Free()</code> calls the Standard C library function <code>free()</code> to free memory allocated from the heap.) | ||
A plaintext secret or private key is zeroized when it is deleted. | A plaintext secret or private key is zeroized when it is deleted (with a <code>FC_DestroyObject</code> call). | ||
All plaintext secret and private keys are zeroized when | All plaintext secret and private keys are zeroized when | ||
| Line 140: | Line 140: | ||
* the NSS cryptographic module switches between the FIPS and non-FIPS modes. | * the NSS cryptographic module switches between the FIPS and non-FIPS modes. | ||
Passwords are automatically zeroized immediately after use. | Passwords are automatically zeroized by the NSS cryptographic module immediately after use. | ||
The <code>memset()</code> function is extremely fast. Zeroization can be performed in a time that is not sufficient to compromise plaintext secret and private keys and passwords. | The <code>memset()</code> function is extremely fast. Zeroization can be performed in a time that is not sufficient to compromise plaintext secret and private keys and passwords. | ||