in reply to Re: Is it possible to sanitize Perl memory that holds sensitive data? (crypto implications)
in thread Is it possible to sanitize Perl memory that holds sensitive data? (crypto implications)

I didn't know about Devel::Peek... Thanks.

It looks like you have to assign a value of the same type as the one you wish to overwrite. I wonder why Perl preserves values of other types... maybe something to do with the number/string autoconversion? I'm guessing efficiency... Anyone?

Anyway, by now I'm convinced that the Perl internals are sufficiently complex that it's best to use C libraries that don't expose sensitive data to Perl at all (if possible).


email: perl -e 'print reverse map { chr( ord($_)-1 ) } split //, "\x0bufo/hojsfufqAofc";'
  • Comment on Re^2: Is it possible to sanitize Perl memory that holds sensitive data? (crypto implications)