Password Managers: Under the Hood of Secrets Management

Re:Password Managers: Under the Hood of Secrets Management by jrockway on Wednesday February 20, 2019 @10:52AM (#19208823)

Any computer program is going to have data in RAM. It's up to something else to protect that. (This is why ARM machines have that encrypted RAM, this is why real security software runs in some sort of tamper-proof area, etc. This paper shows the general "whatever" attitude that general-purpose computers adopt towards attacks where someone has physical or root access.)

[ Parent | on HN ]

Re:Password Managers: Under the Hood of Secrets Management by phishfi on Wednesday February 20, 2019 @11:46AM (#19209356)

Can't a password manager use the TPM to encrypt/decrypt the passwords in real time, a la Windows Hello?

[ Parent | on HN ]

Re:Password Managers: Under the Hood of Secrets Management by loeg on Wednesday February 20, 2019 @10:15PM (#19214210)

It seems like a TPM would be a good way for the OS to implement CryptProtectMemory.

[ Parent | on HN ]