話說去逛網頁發現一個網頁：
http://www.dominik-reichl.de/opensource.shtml#keecryptlib
裡面有一個Open Source的程式：C++ Class: CSecureEditEx
上面說可以防止記憶體內的密碼被看見。
整個網頁好用的軟體很多，如：KeePass Password Safe(官網說執行時可以防止記憶體內的密碼被擷取)、VisualHash、C++ Class: CSecureEdit、C++ Class: CSecureEditeEx、KeeCryptLib。
後3個應該有在寫程式的人可以用到，都是Open Source的。
節錄網站說法：
C++ Class: CSecureEdit：
Secure Password Edit controls are resistant to window style changers and programs that read out the text of password edits.
C++ Class: CSecureEditEX：
Improved version of the CSecureEdit class, but also has some additional limitations (no selections are possible). The CSecureEditEx class is, in contrast to the lite CSecureEdit class, resistant against process memory dumpers. The entered passwords aren't visible in the process memory of the application.
KeePass Password Safe：
# KeePass supports the Advanced Encryption Standard (AES, Rijndael) and the Twofish algorithms to encrypt its password databases.
# Both of these ciphers are regarded as very secure by the cryptography community. Banks are using these algorithms for example, too.
# Even if you would use all computers in the world to attack one database, decrypting it would take longer than the age of the universe.
# Even quantum computers won't help that much. The algorithms are symmetric so its complexity would be reduced a bit, anyway, the sun will go nova before you have decrypted the database.
# The complete database is encrypted, not only the password fields. So your usernames, notes, etc. are protected, too.
# SHA-256 is used as password hash. SHA-256 is a 256-bit cryptographically secure one-way hash function. Your master password is hashed using this algorithm and its output is used as key for the encryption algorithms.
# In contrast to many other hashing algorithms, no attacks are known yet against SHA-256.
# Protection against dictionary and guessing attacks: by transforming the final master key very often, dictionary and guessing attacks can be made harder.
# In-Memory Passwords Protection: Your passwords are encrypted while KeePass is running, so even if Windows caches the KeePass process to disk, this wouldn't reveal your passwords anyway.
# [2.x] Protected In-Memory Streams: When loading the inner XML format, passwords are encrypted using a session key. <-------------(看來雖然2.X是測試版，但安全性較高)
# Security-Enhanced Password Edit Controls: KeePass is the first password manager that features security-enhanced password edit controls. None of the available password edit control spies work against these controls. The passwords entered in those controls aren't even visible in the process memory of KeePass.
總之，KeePass Password Safe這軟體應該很好用，又是Open Source的，支援含中文在內超過28種語言，強力推薦！
