home.social

#defendabledesign — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #defendabledesign, aggregated by home.social.

  1. tolga @[email protected] ·

    TIL: Running Golang functions in Secrets Mode 🥷
    antonz.org/accepted/runtime-se

    "The new runtime/secret package lets you run a function in secret mode. After the function finishes, it immediately erases (zeroes out) the registers and stack it used. Heap allocations made by the function are erased as soon as the garbage collector decides they are no longer reachable.

    secret.Do(func() {
    // Generate an ephemeral key and
    // use it to negotiate the session.
    })

    This helps make sure sensitive information doesn't stay in memory longer than needed, lowering the risk of attackers getting to it.

    The package is experimental and is mainly for developers of cryptographic libraries, not for application developers."

    #swdev #appsec #cryptography #defendabledesign

    #swdev #appsec #cryptography #defendabledesign
  2. tolga @[email protected] ·

    TIL: Running Golang functions in Secrets Mode 🥷
    antonz.org/accepted/runtime-se

    "The new runtime/secret package lets you run a function in secret mode. After the function finishes, it immediately erases (zeroes out) the registers and stack it used. Heap allocations made by the function are erased as soon as the garbage collector decides they are no longer reachable.

    secret.Do(func() {
    // Generate an ephemeral key and
    // use it to negotiate the session.
    })

    This helps make sure sensitive information doesn't stay in memory longer than needed, lowering the risk of attackers getting to it.

    The package is experimental and is mainly for developers of cryptographic libraries, not for application developers."

    #swdev #appsec #cryptography #defendabledesign

    #defendabledesign #cryptography #appsec #swdev