Multiple changes

[awnumar]

• Refactoring of functionality into core package.
• Addition of Enclave objects which store encrypted data.
• Rewrite of signals handling. Should make implementing further data catching much easier.
• Rewrite and simplification of the API.
• Addition of examples package.
• Patched data races in interrupt handling functionality.
• Conceal mapped memory from core dumps on OpenBSD.
• Additional functionality added such as safe panicking.
• Disable core dumps by default. Users that want them can enable themselves.
• Use local entropy pool for fast random bytes reading.
• Use a variable sized canary value with 32 <= len(canary) <= ~pagesize.
• Other optimisations and improvements.
• ...

[awnumar]

An important little change that was slipped in 61e6b4f is that NewBuffer returns a mutable container whereas NewBufferFromBytes and NewBufferRandom return immutable ones. Also Enclaves decrypt to immutable LockedBuffers.

[awnumar]

I'm tentatively considering this ready to merge. Eyes on the code would be appreciated.

[capnspacehook]

I can take a look at all the changes this weekend

[capnspacehook]

Any reason you removed clone and resize?

[awnumar]

Clone was removed because of API bloat and I don't want to encourage the duplication of sensitive information. It's fairly easy to recreate its functionality:

b := NewBuffer(8)
c := NewBuffer(b.Size())
c.Copy(b.Bytes())
c.Freeze() // optional

Resize required some important decisions to be made regarding mutability and data, decisions that the programmer should probably make themselves. Again the functionality is easy to recreate:

b := NewBuffer(8)
c := NewBuffer(new_size)
c.Copy(b.Bytes())
b.Destroy()

I'm thinking of a way to implement streaming into and out of Enclaves which should reduce the need for Resize. (Resize was posed as a solution to #68 originally.)

Do you consider these to be necessary components of the API?

[capnspacehook]

I don't consider Clone or Resize to be necessary at all, the reasons you have for removing them are very good ones I think. I was just curious about your reasoning.

I do think while I wouldn't consider it essential, streaming would be nice to have.