[p2p-hackers] amicima MFP and crypto upgrades

[coderman]

On 12/17/05, Matthew Kaufman <matthew at matthew.at> wrote:
> ...
> 2. We've significantly upgraded the "MFP defcrypto" default cryptographic
> plug-in.

i forgot to mention this previously but it is always a good idea to
lock memory pages where key material and cipher state resides.  the
'mlock' function can do this on unix systems (not sure what the
equivalent is for win32 api).

this does require root privilege which can make application coding a
little more complicated.  (i.e. handling setuid and dropping privs,
etc).

i've also seen some systems use unix IPC shared memory to keep memory
from paging out to swap, etc.  if you use an encrypted swap partition
this might be somewhat less of a concern.

best regards,