Java also has no mfence or clflush support, so crypto.zero would never be secure...

rurban on June 22, 2019 | parent | context | favorite | on: SSH gets protection against side-channel attacks

Java also has no mfence or clflush support, so crypto.zero would never be secure. It might overwrite the key in the store buffer only, but not on the heap immediately, so prone to sidechannel attacks.

java-man on June 25, 2019 [–]

This is interesting. Could you explain this please?