Skip to content

Avoid more instances of the DRBG in GCable RAM by reseeding rather than regenerating.#146

Merged
sgmiller merged 1 commit intomainfrom
sgm/reseed-rather-than-rebuild
Feb 4, 2025
Merged

Avoid more instances of the DRBG in GCable RAM by reseeding rather than regenerating.#146
sgmiller merged 1 commit intomainfrom
sgm/reseed-rather-than-rebuild

Conversation

@sgmiller
Copy link
Copy Markdown
Contributor

Thinking more about the attack surface of the DRBG and our inability to zero
memory, it seems safer to use the Reseed function of the single DRBG
instance rather than instantiating a new DRBG when needing to reseed.

@sgmiller sgmiller requested a review from jefferai as a code owner November 28, 2024 01:29
@sgmiller sgmiller requested a review from a team February 4, 2025 16:28
@sgmiller sgmiller merged commit 3f5c9b6 into main Feb 4, 2025
@sgmiller sgmiller deleted the sgm/reseed-rather-than-rebuild branch February 4, 2025 18:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants