Use |mprotect()| to secure key data ? / was: Re: Proposal: always handle keys in separate process

Gert Doering gert at greenie.muc.de
Wed Jan 20 19:32:38 AEDT 2016


Hi,

On Wed, Jan 20, 2016 at 01:53:41AM +0100, Roland Mainz wrote:
> >> any performance impact if the code is switched to plain { |open()|,
> >> |read()|, ... } (with sufficient wrappers for |EINTR| handling) ?
> 
> Well, I am not happy with the solution because it adds *lots* of extra
> overhead (not noticeable on today's multi-GHz desktop machines but on
> small embedded machines this bites back).

Actually, "open(), read(full file size), close()" is *less* overhead than
mixing in an extra stdio layer.  Of course what you don't want to do is
single-byte-read()s then...

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de


More information about the openssh-unix-dev mailing list