apache / incubator-milagro-crypto-rust

Apache Milagro Crypto Library - Rust Version
https://milagro.apache.org/
Apache License 2.0
31 stars 19 forks source link

Zero all required secrets #33

Open kirk-baird opened 4 years ago

kirk-baird commented 4 years ago

What is the issue

Items such as secret keys should be zeroed before the memory is freed.

This can be acomplished through the crate zeroize

This should include any subroutines. e.g. secret key are then converted to Big and used for multiplication any copies or other leaks of information should be zeroed.