well, really the chances of a key falling into swap are nearly insignificant if the signing is being done frequently
but even stilll, i've put 8 rewrites on it, even if it optimizes out to only one actual write it's still effective
Yes and if it's that important you can always use mlock() or VirtualLock()
oh yeah i am always forgetting... with Go there is always cgo for this kind of thing or maybe it can be done with assembler, assembler is preferable because it doesn't complicate the build workflow
not sure about such kernel specific calls and build workflow but probably it's something you can just dump into the symbol tabel and voila