storing crypto key in CPU registers
"lsi" <[email protected]>
| Newsgroups | gmane.comp.security.programming |
|---|---|
| Message-ID | <40017253.29254.DEE8BB@localhost> |
Just a thought: Whilst reading some compiler documentation the point was made that "The Intel x86 chips offer eight 32-bit registers, while the x87 numeric coprocessor sports another eight 80-bit floating point registers.". Some of these registers are used internally. But maybe at least one of them is available to store up to 80 bits of crypto key, in a location that is not coredumped or swapfiled? Multiple registers could be combined to store a larger keysize. Previous discussion has commented that storing a key for programmatic access is unavoidably insecure. While storing keys in registers on the CPU itself does not rectify the problem, it might potentially reduce the number of avenues of attack available. Stuart -- Stuart Udall stuart at cyberdelix dot net - http://www.cyberdelix.net/ ..revolution through evolution want to make some cash? check out http://cyberdelix.net/affiliates.htm