| 12345678910111213141516171819 |
- Known security limitations
- --------------------------
- Lack of secure memory wiping
- ============================
- `Memory wiping`_ is used to protect secret data or key material from attackers
- with access to uninitialized memory. This can be either because the attacker
- has some kind of local user access or because of how other software uses
- uninitialized memory.
- Python exposes no API for us to implement this reliably and as such almost all
- software in Python is potentially vulnerable to this attack. The
- `CERT secure coding guidelines`_ assesses this issue as "Severity: medium,
- Likelihood: unlikely, Remediation Cost: expensive to repair" and we do not
- consider this a high risk for most users.
- .. _`Memory wiping`: http://blogs.msdn.com/b/oldnewthing/archive/2013/05/29/10421912.aspx
- .. _`CERT secure coding guidelines`: https://www.securecoding.cert.org/confluence/display/c/MEM03-C.+Clear+sensitive+information+stored+in+reusable+resources
|