Deterministic Memory Management for Managed Runtimes
summary
Examines how managed runtimes (e.g., JVM, CLR, other garbage-collected platforms) make it hard to deterministically allocate and securely erase sensitive key material when implementing cryptographic systems like SSL/TLS. Presents a small implementation that demonstrates the memory-leak/retention problem, then outlines concrete steps to fix secure allocation and erasure so managed runtimes can be reconsidered for critical infrastructure.
AI-written summary · about
chapters (5)
related talks
50mLet’s refresh our memory! Memory management in .NET.
23mHow Do We Know That Weak Memory Matters?
50mSmashing the Stack: Let’s Make It Less Fun And Unprofitable!
01h 06mmemory-safe C++
01h 10mJava Memory Model (JMM) for Beginners and Advanced Users
46mRethinking Architectures and Abstraction for a World Where Security Improvements Matter More than Performance Gains
08mChatGPT, Make a Secure Malloc for me
23mHardware security for critical national infrastructure