Skip to content

feat: zeroize#61

Draft
lonerapier wants to merge 14 commits intomainfrom
feat/zeroize
Draft

feat: zeroize#61
lonerapier wants to merge 14 commits intomainfrom
feat/zeroize

Conversation

@lonerapier
Copy link
Copy Markdown
Collaborator

@lonerapier lonerapier commented Dec 3, 2025

closes #44

Changes:

  • zeroize for all structs with sensitive material
  • zeroize feature. turned on as default feature.
  • manual zeroize sensitive keys/secrets in methods.
    • Uniffi doesn't allow Drop due to multiple copies of same buffer in FFI boundary conversions.
  • Replace factor specific secret, key types with compile-time checked ByteArray removing Vec<u8>.

@lonerapier lonerapier linked an issue Dec 3, 2025 that may be closed by this pull request
security: use zeroize to ensure sensitive memory values are erased #44
Open
@lonerapier
fix doctests
705f2c6
@lonerapier
task: pin differential tests to specific commit (#58)
40635f8
@lonerapier
fix(F7): CBC encryption for ooba target (#56)
84407e6 
* add cbc encryption for ooba target

* use crate's inner trait method

* add security warning
@lonerapier
fix(F6): hint entropy leak (#57)
f07a884 
* add hint to integrity checks

* add integrity check for add hint

* verify policy integrity before hint checks
Base automatically changed from fix/audit to main April 20, 2026 21:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

security: use zeroize to ensure sensitive memory values are erased

1 participant

@lonerapier