saymrwulf/cryptography
1
0
Fork 0
mirror of https://github.com/saymrwulf/cryptography.git synced 2026-05-14 20:37:55 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Limitations

Browse source
This commit is contained in:
Alex Stapleton 2014-03-22 23:03:15 +00:00
parent eaeed6ce3d
commit 68bba2d174
2 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
docs/index.rst
View file

@ -85,6 +85,7 @@ The ``cryptography`` open source project
installation
development/index
security
limitations
api-stability
doing-a-release
changelog

16
docs/limitations.rst Normal file
View file

@ -0,0 +1,16 @@
Known security limitations
--------------------------
Lack of secure memory wiping
============================
`Memory wiping`_ is used to protect secret data or key material from attackers
with access to uninitialized memory. This can be either because the attacker
has some kind of local user access or because of other softwares use of
uninitialized memory.
Python exposes no API for us to implement this reliably and as such most
software in Python is vulnerable to this attack. However we do not currently
believe this to be particularly high risk issue for most users.
.. _`Memory wiping`: http://blogs.msdn.com/b/oldnewthing/archive/2013/05/29/10421912.aspx