Skip to content

Refactor key handling on the application #6

@alexgg

Description

@alexgg

From https://github.com/balena-io-security/security-reviews/blob/main/2022/11-15-2022-balena-sign.md

Keys are handled without being treated as secure for memory purposes. When loading keys into memory, the variables should be loaded as bytearrays to allow us to overwrite the elements of the bytearray, then del the reference. Even if the object were to resurface at that point, it would be filled with gibberish. This protects against retrieving the key from running process memory outside of a limited window.

Refactor key handling on the application

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions