diff options
| author | Janek Bevendorff <janek@jbev.net> | 2019-02-22 00:28:45 +0300 |
|---|---|---|
| committer | Jonathan White <support@dmapps.us> | 2019-04-21 16:39:28 +0300 |
| commit | 13eb1c0bbdf07312f099099c7ca571c6a77eafa1 (patch) | |
| tree | e9f20157bd7cd08abad3f12ddb3a99e8fd14fc6f /INSTALL.md | |
| parent | c7898fdeee07b17939d2e5af4bb507493b2d8a0b (diff) | |
Improve resilience against memory attacks
To reduce residual fragments of secret data in memory after
deallocation, this patch replaces the global delete operator with a
version that zeros out previously allocated memory. It makes use of
the new C++14 sized deallocation, but provides an unsized fallback
with platform-specific size deductions.
This change is only a minor mitigation and cannot protect against
buffer reallocations by the operating system or non-C++ libraries.
Thus, we still cannot guarantee all memory to be wiped after free.
As a further improvement, this patch uses libgcrypt and libsodium
to write long-lived master key component hashes into a secure
memory area and wipe it afterwards.
The patch also fixes compiler flags not being set properly on macOS.
Diffstat (limited to 'INSTALL.md')
| -rw-r--r-- | INSTALL.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/INSTALL.md b/INSTALL.md index d3927536f..3bc9185d9 100644 --- a/INSTALL.md +++ b/INSTALL.md @@ -25,7 +25,7 @@ The following libraries are required: * zlib * libmicrohttpd * libxi, libxtst, qtx11extras (optional for auto-type on X11) -* libsodium (>= 1.0.12, optional for KeePassXC-Browser support) +* libsodium (>= 1.0.12) * libargon2 Prepare the Building Environment |