How does Java's Garbage Collector treat KeyStores, in terms of data lifetime? Since I couldn't find anything documented on it, should I assume it treats it like any other object, potentially copying it around memory needlessly? I'm wondering if I should use it to store cryptographic keys in memory. If I have an encrypted key and the corresponding plaintext password simultaneously in memory, it's not really providing security for me, right?
-
Is the focus of the question more on the KeyStore object lifetime or is it on whether holding it in memory relatively safe? – katrix Jan 13 '17 at 21:34
-
I suppose I'm asking about the KeyStore object security in general. – Atte Juvonen Jan 13 '17 at 22:30
Add a comment
|
