saymrwulf/risc0-curve25519-dalek-source
1
0
Fork 0
mirror of https://github.com/saymrwulf/risc0-curve25519-dalek-source.git synced 2026-09-07 20:30:39 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Overwrite secret key material with zeroes on drop.

Browse source
This commit is contained in:
Isis Lovecruft 2018-07-20 20:20:40 +00:00
parent 494c4628c2
commit d896886691
Failed to extract signature
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
src/ed25519.rs
View file

@ -173,6 +173,13 @@ impl Debug for SecretKey {
} }
} }
/// Overwrite secret key material with null bytes when it goes out of scope.
impl Drop for SecretKey {
fn drop(&mut self) {
self.0 = [0u8; SECRET_KEY_LENGTH];
}
}
impl SecretKey { impl SecretKey {
/// Expand this `SecretKey` into an `ExpandedSecretKey`. /// Expand this `SecretKey` into an `ExpandedSecretKey`.
pub fn expand<D>(&self) -> ExpandedSecretKey where D: Digest<OutputSize = U64> + Default { pub fn expand<D>(&self) -> ExpandedSecretKey where D: Digest<OutputSize = U64> + Default {
@ -375,6 +382,14 @@ pub struct ExpandedSecretKey {
pub (crate) nonce: [u8; 32], pub (crate) nonce: [u8; 32],
} }
/// Overwrite secret key material with null bytes when it goes out of scope.
impl Drop for ExpandedSecretKey {
fn drop(&mut self) {
self.key = Scalar::zero();
self.nonce = [0u8; 32];
}
}
#[cfg(feature = "sha2")] #[cfg(feature = "sha2")]
impl<'a> From<&'a SecretKey> for ExpandedSecretKey { impl<'a> From<&'a SecretKey> for ExpandedSecretKey {
/// Construct an `ExpandedSecretKey` from a `SecretKey`. /// Construct an `ExpandedSecretKey` from a `SecretKey`.