SunScreen 3.2 Release Notes

A Word of Caution

If you are using SKIP, IPsec, or IKE cryptography on your Screen, you should secure any core files and private keys. A savecore file (kernel core dump) contains your local cryptographic secret or secrets. It would be difficult for someone to discern or discover the secret, but it is possible. You should, therefore, protect a core file as carefully as any of your other local secrets.

Remember, if you send your core file out-of-house for analysis, you are giving your local secret to the analyst.

Because all regular system backups made while a core file exists contain the files in which your local secret or secrets are stored, any system backups must be considered a possible means of discovering your local secret or secrets.


Note -

Keep all of your regular system backups in a secure location.