Skip to content

Encrypted vault

Quentin Delhaye edited this page May 5, 2026 · 1 revision

In a previous example we saw how memory leakage can occur when buffer are not correctly handled. For example, if a dynamically allocated memory buffer is not cleared properly before freeing, the freed slab could still hold sensitive data that could be exposed to another process getting that same slab. Therefore, we could cipher the shared buffer, making leakages more difficult to exploit.

Let's implement an encrypted vault in the kernel.

Clone this wiki locally