On Mon, Aug 21, 2000 at 09:59:44AM +0700, Oskar Sandberg wrote: > It would not be that hard to implement a paranoid memory only mode (byte[] > big = new byte[6553600] ; OutputStream out = new > CipherOutputStream(blockCipher, new ByteArrayOutputStream(big))) but it > would suck a lot of memory, and if your swapping your not that much better > off.
This is useless if you don't either lock any memory that contains plaintext (which requires a client or node to be written in C or C++ (or some other language which has very low level memory access, such as assembly language)), disable the swap partition, have no swap partition, or have an encrypted swap partition. -- Travis Bemann Sendmail is still screwed up on my box. My email address is really bemann at execpc.com. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 1081 bytes Desc: not available URL: <https://emu.freenetproject.org/pipermail/devl/attachments/20000820/15e3e9a8/attachment.pgp>