MemGuard is a Go library that provides a secure software enclave for storing sensitive data in memory, protecting it from exposure and memory-based attacks.
Software sandbox for storage of sensitive information in memory.
MemGuard is designed for developers who need to securely handle sensitive information such as cryptographic keys, passwords, or secrets within their applications. It is particularly useful in scenarios where in-memory data protection against cold-boot attacks, memory dumps, and side-channel attacks is critical. Security-conscious software projects requiring robust secrets management and data encryption in memory will benefit from this tool.
The API is experimental and may undergo unstable changes, so it is recommended to pin versions when using MemGuard. Users should be aware that some features rely on OS-specific kernel protections and direct system calls, which may require appropriate permissions or platform support. Care should be taken to handle signals and session termination properly to avoid leaving sensitive data in memory.
Run `go get github.com/awnumar/memguard` to install the package
Pin a specific version to avoid unstable API changes as the API is experimental
go get github.com/awnumar/memguard
Installs the MemGuard package for use in Go projects