RE: Secure text editor?

2007-05-18 Thread daneshwar.mishra
m: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alessandro Vesely Sent: Friday, May 18, 2007 12:58 PM To: gnupg Subject: Re: Secure text editor? Ryan Malayter wrote: > On 5/17/07, Alessandro Vesely <[EMAIL PROTECTED]> wrote: >> Not quite. That may happen as an undocumented

Re: Secure text editor?

2007-05-18 Thread Alessandro Vesely
Ryan Malayter wrote: > On 5/17/07, Alessandro Vesely <[EMAIL PROTECTED]> wrote: >> Not quite. That may happen as an undocumented side effect on some >> (or all) OS versions, and is not what the function is meant to do. > > The documentation clearly states: > "These pages are guaranteed not to be w

Re: Secure text editor?

2007-05-17 Thread Ryan Malayter
On 5/17/07, Alessandro Vesely <[EMAIL PROTECTED]> wrote: > Not quite. That may happen as an undocumented side effect on some > (or all) OS versions, and is not what the function is meant to do. > The function keeps the page in memory. The OS is still free to back > it up whenever it thinks it is co

Re: Secure text editor?

2007-05-16 Thread Alessandro Vesely
Ryan Malayter wrote: > On 5/15/07, Alessandro Vesely <[EMAIL PROTECTED]> wrote: >> On Windows there is >> just one way to share memory. Memory locking must be understood in that >> context. It is meant for synchronization purposes, not for security. > > LocalLock() and GlobalLock() do indeed seem

Re: Secure text editor?

2007-05-16 Thread Alessandro Vesely
Peter Lebbing wrote: > Alessandro Vesely talked about snooping in the memory space of the process. > Yes, if your computer is compromised, all activity at that moment is also > compromised. The thing with swapspace though, is that the plaintext remains > on disk long after you've edited the file!

Re: Secure text editor?

2007-05-15 Thread Peter Lebbing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thanks for all the helpful posts. I think I will go with just using my Linux laptop for it. I can just encrypt the swap, it's not difficult, I've played with cryptoloop before. I didn't use it for swap, but it's identical. And while I'm at it, I'll ju

Re: Secure text editor?

2007-05-15 Thread Thomas Vollmer
On Dienstag, 15. Mai 2007, Henry Hertz Hobbit wrote: > Thomas Vollmer wrote: > > > > First, at this point I am reluctant to have all of this in the > newsgroup. I am strongly in favor of giving only what works > there. I don't think most people are interested in all of the > nitty gritty details

Re: Secure text editor?

2007-05-15 Thread Ryan Malayter
On 5/15/07, Alessandro Vesely <[EMAIL PROTECTED]> wrote: > Virtual memory is a feature that an OS can expose to apps. Memory mapped > files are an example. On Linux there are both shm and mmap. Traditional > SysV stuff may better suit inter-process sharing, while more recent APIs > emphasize multi-

Re: Secure text editor?

2007-05-15 Thread Alessandro Vesely
Peter S. May wrote: > Peter Lebbing wrote: >> an editor which will not leak the text in any way, so locking it's pages in >> memory so they won't be swapped out, and other angles of attack. > ... > > (Developers familiar with swap-locked memory: I'd appreciate at least a > short explanation of ho

Re: Secure text editor?

2007-05-15 Thread Thomas Vollmer
On Montag, 14. Mai 2007, Henry Hertz Hobbit wrote: > You wrote: > > I use my standard text edit for this. It is vim with the > > gnupg plugin from Markus Braun: > > > > http://vim.sourceforge.net/scripts/script.php?script_id=661 > > installed. Please keep the discussion in the mailing list. > THI

Re: Secure text editor?

2007-05-14 Thread Werner Koch
On Tue, 15 May 2007 00:11, [EMAIL PROTECTED] said: > I'm certainly no expert, but I can offer a link, as I was just looking > into this myself. Locking seems to be page-based on Windows NT There has been a lot of discussion in the past about VirtualLock. First it seemed to be a viable solution,

Re: Secure text editor?

2007-05-14 Thread Roscoe
Swap is indeed optional. I've been running Debian with X/e16/screen/vim/irssi/xmms/mozilla for a a while (a year? or two?) and never noticed any performance difference. I doubt anyone else would either. (DDR2-800 2048MB, 2GHz dual core Athlon, before that DDR-400 1024MB, 2GHz single core Athlon).

Re: Secure text editor?

2007-05-14 Thread Ryan Malayter
On 5/14/07, Peter S. May <[EMAIL PROTECTED]> wrote: > (Developers familiar with swap-locked memory: I'd appreciate at least a > short explanation of how it works to someone who understands ISO C but > not necessarily OS-specific APIs. Can stack memory be locked, or only > heap memory? Would ther

Re: Secure text editor?

2007-05-14 Thread Ryan Malayter
On 5/14/07, Zach Himsel <[EMAIL PROTECTED]> wrote: > On 5/14/07, Peter S. May <[EMAIL PROTECTED]> wrote: > > On Linux, swap space is its own partition > I just realized something. You have the option to NOT use swap > space in Linux. Does this mean that there is no memory written > to disk? If so,

Re: Secure text editor?

2007-05-14 Thread Zach Himsel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/14/07, Peter S. May <[EMAIL PROTECTED]> wrote: > On Linux, swap space is its own partition I just realized something. You have the option to NOT use swap space in Linux. Does this mean that there is no memory written to disk? If so, then it might

Re: Secure text editor?

2007-05-14 Thread Zach Himsel
On 5/11/07, Peter Lebbing <[EMAIL PROTECTED]> wrote: > Does anybody know an editor that's up to the job? Try this: http://tinyurl.com/23pcb7 -- Zach Himsel |_|0|_| --- OpenPGP Key: 0x9A1DFCAC --- |_|_|0| () I support the **ASCII Ribbon Campaign** |0|0|0| /\ (against html ma

Re: Secure text editor?

2007-05-14 Thread Robert J. Hansen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 > (Developers familiar with swap-locked memory: I'd appreciate at > least a > short explanation of how it works to someone who understands ISO C but > not necessarily OS-specific APIs. Can stack memory be locked, or only > heap memory? Would the

Re: Secure text editor?

2007-05-14 Thread Werner Koch
On Mon, 14 May 2007 18:28, [EMAIL PROTECTED] said: > (Developers familiar with swap-locked memory: I'd appreciate at least a > short explanation of how it works to someone who understands ISO C but > not necessarily OS-specific APIs. Can stack memory be locked, or only Using mlock(2) it would b

Re: Secure text editor?

2007-05-14 Thread Peter S. May
Peter Lebbing wrote: > I want to have a text file with personal data in it, which I encrypt to > myself, and decrypt to view and edit. However, to do that securely, I need > an editor which will not leak the text in any way, so locking it's pages in > memory so they won't be swapped out, and other

Re: Secure text editor?

2007-05-14 Thread Thomas Vollmer
On Freitag, 11. Mai 2007, Peter Lebbing wrote: > Hello all, Hi, > I want to have a text file with personal data in it, which I encrypt > to myself, and decrypt to view and edit. However, to do that securely, > I need an editor which will not leak the text in any way, so locking [...] > decrypt,

Re: Secure text editor?

2007-05-13 Thread Zach Himsel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/11/07, Peter Lebbing <[EMAIL PROTECTED]> wrote: > Does anybody know an editor that's up to the job? On 5/11/07, Joseph Oreste Bruni <[EMAIL PROTECTED]> wrote: > Since you are only encrypting in place and not transferring the > documents to anothe

Re: Secure text editor?

2007-05-11 Thread Ryan Malayter
On 5/11/07, Joseph Oreste Bruni <[EMAIL PROTECTED]> wrote: > It is a requirement that the files themselves be encrypted > individually or would it suffice to use an encrypted file system? It seems you really want/need a *full-disk* encryption solution, so that any temporary files and system pagefi

Re: Secure text editor?

2007-05-11 Thread Joseph Oreste Bruni
It is a requirement that the files themselves be encrypted individually or would it suffice to use an encrypted file system? Since you are only encrypting in place and not transferring the documents to another individual, there is probably no need to use public-key encryption. Any tool that

Secure text editor?

2007-05-11 Thread Peter Lebbing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello all, I want to have a text file with personal data in it, which I encrypt to myself, and decrypt to view and edit. However, to do that securely, I need an editor which will not leak the text in any way, so locking it's pages in memory so they wo