Oddbean new post about | logout
▲ ▼
Derek Ross | 9 months ago (raw) | root | parent | reply | flag 
 Right, so technically the CPU sees the private key.
▲ ▼
The Fishcake🐶🐾 | 9 months ago (raw) | root | parent | reply | flag +3 
 Technically, the service owner has access to nsec. CPU, RAM, (if swapped also disk) sees the key. Unless it is a dedicated HSM or something like Enclave (AWS) there is no way around it 🐶🐾🫡
▲ ▼
Derek Ross | 9 months ago (raw) | root | parent | reply | flag 
 Hmm I wonder if a simple process trace would reveal the key when it's in flight then?
▲ ▼
ben | 9 months ago (raw) | root | parent | reply | flag +2 
 a tool to dump the process memory might 😉
▲ ▼
Derek Ross | 9 months ago (raw) | root | parent | reply | flag +1 
 strace 👀