We modified ssh-keygen to encrypt all the private authentication key files it generates with the application key; our ssh client decrypts the authentication keys with the application private key upon startup and places them, along with all other heap objects,into ghost memory.Since the OS cannot gain access to the application key, it cannot decrypt the authentication keys that are stored on disk, and it can not read the clear text versions out of ssh’sor ssh-keygen’s ghost memory.