Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Secure Deletion of Keys and Passwords #14

Open
micchickenburger opened this issue Jan 1, 2024 · 1 comment
Open

Secure Deletion of Keys and Passwords #14

micchickenburger opened this issue Jan 1, 2024 · 1 comment
Labels
help wanted Extra attention is needed question Further information is requested

Comments

@micchickenburger
Copy link
Owner

In JavaScript, there is no control over garbage collection. There is some thought that one could overwrite a TypedArray with zeros or random values to overwrite a secret in memory. Before implementing this, however, I would like to verify that this is actually the case (not just that a new TypedArray is created in memory with the new values and the old array is dereferenced and scheduled for deletion by the garbage collector, for instance.)

@micchickenburger micchickenburger added help wanted Extra attention is needed question Further information is requested labels Jan 1, 2024
@micchickenburger
Copy link
Owner Author

you could implement a custom virtual dom and an input component yourself. hook into the keypress events and update/append to a buffer with the key pressed, and immediately overwrite the vdom before it can be GC'd, then overwrite the buffer when you're done with it.

From #43

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted Extra attention is needed question Further information is requested
Projects
None yet
Development

No branches or pull requests

1 participant