News for hackers. Stuff that matters.

A comment on Zeroing buffers is insufficient. Parent comment

Re:Zeroing buffers is insufficient by hollerith on Saturday September 06, 2014 @04:16PM (#8279342)
Does your PGP key stay on the smartcard or is a copy of it transferred to your computer on occasion?
[ Parent | on HN ]
Re:Zeroing buffers is insufficient by nathan7 on Saturday September 06, 2014 @05:45PM (#8279587)
The key can be generated on the smartcard, and it's not possible to transfer it out of the smartcard by design. (anything that calls itself a smartcard but allows this isn't a smartcard)
[ Parent | on HN ]
Re:Zeroing buffers is insufficient by Nursie on Saturday September 06, 2014 @04:54PM (#8279445)
If it's a properly designed smartcard system then the key never leaves the card.
[ Parent | on HN ]