Software leaves encryption keys, passwords lying around in memory

[Vennonen, Ari J]

Copied from RISKS-LIST: Risks-Forum Digest  Tuesday 5 November 2002  Volume
22 : Issue 35

Date: Wed, 30 Oct 2002 22:31:46 -0500
From: Monty Solomon <monty at roscom.com>
Subject: Software leaves encryption keys, passwords lying around in memory

  http://online.securityfocus.com/archive/82/297827 

Date: Thu, 31 Oct 2002 05:11:31 +1300 (NZDT)
From: pgut001 at cs.auckland.ac.nz (Peter Gutmann)
Subject: Software leaves encryption keys, passwords lying around in memory

The following problem was first pointed out (in private mail) by Michael
Howard from Microsoft.  His writeup is now available at
  http://msdn.microsoft.com/library/en-us/dncode/html/secure10102002.asp.