kanidm / hsm-crypto

A library for cryptographic operations backed by a HSM or TPM
Mozilla Public License 2.0
5 stars 5 forks source link

Add zeroizer for key storage structs. #9

Closed Firstyear closed 1 year ago

Firstyear commented 1 year ago

https://crates.io/crates/zeroize

We should use this for keys after they are loaded, so that they can primarily be stored "unloaded" and then loaded + used as needed. This likely also would assist with our lifetime + context free issues with tpms.