SSH gets protection against side-channel attacks
RAM encryption for sensitive data is overlooked in so many applications, even "highly secure" applications like veracrypt [0] only recently started adding it.<p>In my opinion server-applications of all sorts should encrypt their private keys by default; this makes cold-boot attacks and other memory-escape attacks so much harder, since now two totally unrelated memory chunks have to be combined in order to retrieve the private key (in fact one could argue that, the higher the quantity of memory chunks is, the harder it is to correctly decrypt the original private key; although to me this has the security through obscurity smell).<p>In practice however, this is rarely done. OpenSSL for example has a whole lot of memory-management functions [1], but none of them seem to include RAM encryption (AFAIK it is not present in the source code elsewhere either, but it's a large one, so I am not familiar with all code. Related: in fact some people even argue it's way too large for it's own good [2]).<p>Even better still, would be to use the CPU Cache for private keys, since this memory is even more difficult to access through any sort of cold boot. An interesting paper with much more information about this subject can be found here [3], to whom it may concern.<p>[0] <a href="https://github.com/veracrypt/VeraCrypt/commit/321715202aed04dd9892d1c0686d080763ab212d" rel="nofollow">https://github.com/veracrypt/VeraCrypt/commit/321715202aed04...</a><p>[1] <a href="https://www.openssl.org/docs/man1.1.0/man3/OPENSSL_zalloc.html" rel="nofollow">https://www.openssl.org/docs/man1.1.0/man3/OPENSSL_zalloc.ht...</a><p>[2] <a href="https://queue.acm.org/detail.cfm?id=2602816" rel="nofollow">https://queue.acm.org/detail.cfm?id=2602816</a><p>[3] <a href="https://www.ieee-security.org/TC/SP2015/papers-archived/6949a003.pdf" rel="nofollow">https://www.ieee-security.org/TC/SP2015/papers-archived/6949...</a>