Secure keystore of lightning nodes / wallets about lnbook

[renepickhardt]

c-lightning has at least https://github.com/ElementsProject/lightning/blob/master/tools/hsmtool.c that can be used to somewhat secure hsm_secret

[darosior]

c-lightning has at least https://github.com/ElementsProject/lightning/blob/master/tools/hsmtool.c that can be used to somewhat secure hsm_secret

C-lightning also support hsm_secret encryption, just start lightningd with --encrypted-hsm.

while hsm_secret could be encrypted the decrypted version would have to be in main memory and could be found with a full memory dump. there are not too many variables to check in a full mem copy.

The specific content of hsm_secret is read in non-swapable (mlocked) memory. However, most of the secrets are still stored in swapable memory as of today.