Tagged Questions

4
votes
3answers
152 views

Is there a common name for a software defect that leads to unexpected transfer of secret over the wire?

Suppose in a C++ program I use a memory region for temporarily storing an encryption key and don't overwrite that region afterwards. Then my program wants to send a data packet over the network. Due ...
12
votes
6answers
616 views

How can the impact of cold boot attacks be minimized?

Short of powering down and maintaining physical security for sufficient time, what are effective strategies for keeping keys from being disclosed by cold-boot attacks, and can anything be done without ...