How does Java's Garbage Collector treat KeyStores, in terms of data lifetime? Since I couldn't find anything documented on it, should I assume it treats it like any other object, potentially copying it around memory needlessly? I'm wondering if I should use it to store cryptographic keys in memory. If I have an encrypted key and the corresponding plaintext password simultaneously in memory, it's not really providing security for me, right?

  • Is the focus of the question more on the KeyStore object lifetime or is it on whether holding it in memory relatively safe? – katrix Jan 13 '17 at 21:34
  • I suppose I'm asking about the KeyStore object security in general. – Atte Juvonen Jan 13 '17 at 22:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.