Zeroing buffers is insufficient

Re:Zeroing buffers is insufficient by nathan7 on Saturday September 06, 2014 @04:11PM (#8279333)

What you're describing is called a smartcard, and readily available on the market. I keep my PGP key on one.

[ Parent | on HN ]

Re:Zeroing buffers is insufficient by hollerith on Saturday September 06, 2014 @04:16PM (#8279342)

Does your PGP key stay on the smartcard or is a copy of it transferred to your computer on occasion?

[ Parent | on HN ]

Re:Zeroing buffers is insufficient by nathan7 on Saturday September 06, 2014 @05:45PM (#8279587)

The key can be generated on the smartcard, and it's not possible to transfer it out of the smartcard by design. (anything that calls itself a smartcard but allows this isn't a smartcard)

[ Parent | on HN ]

Re:Zeroing buffers is insufficient by Nursie on Saturday September 06, 2014 @04:54PM (#8279445)

If it's a properly designed smartcard system then the key never leaves the card.

[ Parent | on HN ]