memguard - GitLite

KO | EN

gitlite — search

#javascript #hacktoberfest #typescript #llm #rust #deep-learning #java #windows #awesome #cli #kubernetes #awesome-list #openai #mcp

memguard

(★ 2,754)

Software sandbox for storage of sensitive information in memory.

파일 탐색기

최종 버전 다운로드 (.zip)

- - bug_report.md
  - proposal.md
  - question.md
- - ci.yml
- auxiliary.go
- auxiliary_test.go
- buffer.go
- buffer_test.go
- coffer.go
- coffer_test.go
- crypto.go
- crypto_test.go
- enclave.go
- enclave_test.go
- exit.go
- exit_test.go
- init.go
- - casting.go
  - casting_test.go
- - socketkey.go
  - socketkey_test.go
- - stdin.go
- - cpuprof1.svg
  - memprof1.svg
  - stream.go
  - stream_test.go
- - streams.go
- README.md
AUTHORS
buffer.go
buffer_test.go
docs.go
enclave.go
enclave_test.go
go.mod
go.sum
LICENSE
logo.svg
memguard.go
memguard_test.go
README.md
signals.go
signals_test.go
stream.go
stream_test.go

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/awnumar/memguard

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd memguard

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. Go

보통 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
Go Go 언어 컴파일러 및 도구 모음입니다.

go build ./...

Go 프로그램을 컴파일해 실행 파일을 만듭니다.

go run .

따로 빌드하지 않고 바로 Go 프로그램을 실행합니다.

✅ 빌드가 에러 없이 끝나면 성공입니다. go run . 을 썼다면 터미널 출력을 확인하세요.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<p align="center">
  <img src="https://cdn.rawgit.com/awnumar/memguard/master/logo.svg" height="140" />
  <h3 align="center">MemGuard</h3>
  <p align="center">Software enclave for storage of sensitive information in memory.</p>
  <p align="center">
    <a href="https://github.com/awnumar/memguard/actions/workflows/ci.yml"><img src="https://github.com/awnumar/memguard/actions/workflows/ci.yml/badge.svg?branch=master"></a>
    <a href="https://pkg.go.dev/github.com/awnumar/memguard?tab=doc"><img src="https://godoc.org/github.com/awnumar/memguard?status.svg"></a>
  </p>
</p>

---

This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go.

## Features

* Sensitive data is encrypted and authenticated in memory with XSalsa20Poly1305. The [scheme](https://spacetime.dev/encrypting-secrets-in-memory) used also [defends against cold-boot attacks](https://spacetime.dev/memory-retention-attacks).
* Memory allocation bypasses the language runtime by [using system calls](https://github.com/awnumar/memcall) to query the kernel for resources directly. This avoids interference from the garbage-collector.
* Buffers that store plaintext data are fortified with guard pages and canary values to detect spurious accesses and overflows.
* Effort is taken to prevent sensitive data from touching the disk. This includes locking memory to prevent swapping and handling core dumps.
* Kernel-level immutability is implemented so that attempted modification of protected regions results in an access violation.
* Multiple endpoints provide session purging and safe termination capabilities as well as signal handling to prevent remnant data being left behind.
* Side-channel attacks are mitigated against by making sure that the copying and comparison of data is done in constant-time.

Some features were inspired by [libsodium](https://github.com/jedisct1/libsodium), so credits to them.

Full documentation and a complete overview of the API can be found [here](https://godoc.org/github.com/awnumar/memguard). Interesting and useful code samples can be found within the [examples](examples) subpackage.

## Installation

```
$ go get github.com/awnumar/memguard
```

API is experimental and may have unstable changes. You should pin a version. [[modules](https://github.com/golang/go/wiki/Modules)]

## Contributing

* Submitting program samples to [`./examples`](examples).
* Reporting bugs, vulnerabilities, and any difficulties in using the API.
* Writing useful security and crypto libraries that utilise memguard.
* Implementing kernel-specific/cpu-specific protections.
* Submitting performance improvements.

Issues are for reporting bugs and for discussion on proposals. Pull requests should be made against master.