awnumar/memguard

Health v2 · maintenance only

Adoption not part of the score

2756 stars · 135 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

MemGuard is a pure Go library that securely stores sensitive information in memory, encrypting it with XSalsa20Poly1305 and bypassing the garbage collector via direct system calls. It adds guard pages, canary values, memory locking, and constant-time operations to reduce exposure of secrets like keys and passwords.

Use cases

• store encryption keys securely in memory in a Go application
• prevent secrets from being swapped to disk
• protect passwords from cold-boot attacks
• avoid garbage collector leaking sensitive buffers
• safely wipe secrets when a session ends
• detect buffer overflows touching sensitive data

When to choose

• you write Go software handling keys, tokens, or passwords
• you need defense-in-depth against memory disclosure and core dumps
• you want a pure-Go, cross-platform secret storage enclave

When to avoid

• your language is not Go
• you only need secrets at rest on disk (use a secrets manager or vault)
• you need a full HSM or hardware-backed key store

Facets

library · maturity active

security cryptography secrets-management security privacy developer-tools go windows cross-platform memory-security sensitive-data guard-pages cold-boot-attack pure-go linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="awnumar/memguard")