Skip to content

[TPM] Phase 1: Foundation & IPC Structuring #67

Description

@Vladush

This phase ensures secrets can safely traverse the system before touching the TPM.

  • Secure Memory: Implement SecureBuffer to replace std::basic_string for handling the unsealed password, dodging Small String Optimization (SSO) leaks via mlock() and explicit_bzero().
  • IPC Binary Framing: Migrate from space-delimited text to a length-prefixed binary frame for SEAL, RESEAL, and unseal response commands to support passwords with spaces.
  • Logging Hardening: Explicitly bypass request debug logging (main.cpp:69) for any secret-bearing payload to prevent syslog leaks.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions