SSH gets protection against side-channel attacks

Re:SSH gets protection against side-channel attacks by java-man on Friday June 21, 2019 @11:33AM (#20243390)

So what you are saying is that JVM copying surviving object between generational pools might expose secrets in memory?

A very good point, thank you.

What could be done to mitigate this? Direct ByteBuffer per

https://stackoverflow.com/questions/5670862/bytebuffer-alloc...

[ Parent | on HN ]

Re:SSH gets protection against side-channel attacks by MarkSweep on Friday June 21, 2019 @06:17PM (#20246728)

In .NET you can pin memory in the GC heap, either using something like the fixed expression in C# or GCHandle. A quick Googleing did not turn up something usable directly by Java, except ByteBuffer.

[ Parent | on HN ]