Hi,

On 29-11-16 00:00, Zhaomo Yang wrote:
> Just wanted to let you know that we have a new implementation of
> secure_memzero.h, which is available at 
> https://compsec.sysnet.ucsd.edu/secure_memzero.h
> <https://compsec.sysnet.ucsd.edu/secure_memzero.h>.
> 
> The version I sent to you guys has a minor issue in dealing with
> memset_s. Also, this implementation synthesizes most of the existing
> working solutions for this problem.  It allows you to specify, via
> macros, which implementation you prefer. This will let users override
> our defaults, if they want.

Thanks, but I think I prefer the more light-weight approach you sent
earlier (slightly molded to use static inline wrapper functions instead
of macro's).  It does what it needs to do for us, and is sufficiently
small to easily integrate into existing code.

And thanks again for notifying us (on security@) on your findings.

-Steffan


------------------------------------------------------------------------------
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to