Custom memory management...

[FellowTraveler]

Ben Laurie made clear to me that there aren't any special "memory tricks" being employed within OpenSSL, for keeping the private keys from swapping to disk, etc.

However, he also said that:

1. There are functions within OpenSSL we can use for zeroing memory after using it (I have a function like this myself.) So we should make sure any OpenSSL-related memory is also zeroed after, using the OpenSSL zeroing function.
2. There are facilities within OpenSSL for substituting the memory manager. Basically if we are paranoid about our RAM, then his point was that WE need to manage the memory ourselves, which OpenSSL will allow us to do.

So TODO: Make our own CUSTOM MEMORY MANAGER and use it for OpenSSL. (We don't have to manage ALL the memory since we already protect our own secrets, but we should at least manage the memory used by our calls to OpenSSL.)