Re:An exploit can reveal your KeePass master password in pla...
by _nalply on Sunday May 21, 2023 @12:55PM
(#36022741)
Perhaps it is possible to avoid having the plaintext in memory at all?
- Only compare the crypttexts, never the plaintexts
- For input use a modified input field to minimize the time the plaintext kept in memory then wipe the memory used by the input field before releasing the memory
- If possible ask the OS never to swap the memory used by the input field
- Only compare the crypttexts, never the plaintexts
- For input use a modified input field to minimize the time the plaintext kept in memory then wipe the memory used by the input field before releasing the memory
- If possible ask the OS never to swap the memory used by the input field