Re: Credentials held unencrypted in memory during runtime

On Apr 12, 2011, at 2:05 PM, Ron Wilson wrote:
> When the background process starts, a new session key should be
> generated, then each new entry in the cache should use a salt or an
> initialization vector. The salt or initialization vector for a given
> entry can be stored with the entry. When an entry is needed, the
> session key and the salt or the initialization vector are used
> together to decrypt the entry.

How is this supposed to work for the next session? I have these entries encrypted with a session key which no longer exists. How do I decrypt them now?

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2719180

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2011-04-12 21:12:21 CEST