Did you *really* zeroize that key?

[Vincent Penquerc'h]

On Thu, Nov 07, 2002 at 07:36:41PM -0500, Patrick Chkoreff wrote:
> Everybody probably also knows about the gnupg trick, where they define a 
> recursive routine called "burn_stack":
[...]
> Then there's the vararg technique discussed in Michael Welschenbach's book 
> "Cryptography in C and C++":

How about a simple alloca/memset ? Though it would possibly be more
subject to `optimizations'.

-- 
Vincent Penquerc'h