Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate using a mutable type for passphrases and other secrets #14

Open
jrick opened this issue Jan 8, 2016 · 0 comments
Open

Investigate using a mutable type for passphrases and other secrets #14

jrick opened this issue Jan 8, 2016 · 0 comments

Comments

@jrick
Copy link
Member

jrick commented Jan 8, 2016

Right now, the System.String type is used for passphrases, the wallet seed, etc. This type is immutable and it is impossible (without unsafe) to clear it after it is finished being used. Instead, investigate other methods of storing these secrets (most likely a byte[]), avoiding creating copies of them when creating RPC requests, and zeroing them when finished.

This is not a totally solvable problem (it gets much worse) but a best attempt should be made regardless.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant