
11/28/2022 · Oxana Kharitonova, Ignat Korchagin
What this post added
This post introduces the Linux Kernel Key Retention Service as a novel approach to protecting cryptographic keys. It highlights how this service, by keeping keys within the kernel's address space, mitigates memory access violations and prevents leaks that can occur in user-space applications, even those written in memory-safe languages. This directly contributes to Cloudflare's data privacy and protection efforts by offering a more robust method for safeguarding sensitive cryptographic material.