Feature: Provide means to use shared memory blob as password (automation, preventing accidental leakage)

_From @heinrich-ulbricht on June 10, 2016 13:3_

This is a feature proposal concerning interoperability and integration with external tools and scripts.

What about a way to pass a password to Cryptomator **without having to enter it manually** (=automation) while **preventing the password from (accidentally) leaking** to log files.

#1 one day probably solves the first requirement: automation. But passing passwords via command line bears the risk of some tools (system log, usual logging tools) capturing the command line and thus the password.

Could we instead provide a pointer to a more volatile location in (shared) memory? Another tool could put the password there and launch Cryptomator with a pointer to the shared memory location. A nice service of Cryptomator could be to erase the memory right after reading the password.

The password thus should be safe from accidental leakage. Only if an attacker explicitly targets this mechanism he would be able to get the password from memory. But usual key loggers, general purpose monitoring tools etc. are no danger anymore.

(Note: key files are no solution for me since even a temporary file might somehow be mirrored by backup software.)

What do you think?

_Copied from original issue: cryptomator/cryptomator#290_

ファイル、テスト、エントリーポイントは指定されていません。まず提案と issue #1 への参照を確認し、次に共有メモリを介してパスワードを渡すために必要なインターフェース、その取り扱いと消去の保証、およびコマンドラインへの漏えいなしに自動化を実証する完了条件を定義してください。

索引モデルが issue の本文から書いたものです。