Re: A secure string library?

From: Peter Dimov (pdimov_at_[hidden])
Date: 2024-07-10 11:59:50

Ruben Perez wrote:
> There is OPENSSL_Cleanse, which does a similar job. I found it surprisingly
> simple - I wonder if this is just enough or there are any corner cases where this
> doesn't work:
> https://github.com/openssl/openssl/blob/b544047c99c4a7413f793afe82ab1c165f85b5b6/crypto/mem_clr.c#L22

That's an interesting approach. I can't offhand think of a reason why it wouldn't
work.