latchset / kryoptic

a pkcs#11 software token written in Rust
GNU General Public License v3.0
10 stars 4 forks source link

Zeroize unwrapped key buffer #14

Closed simo5 closed 7 months ago

simo5 commented 7 months ago

Import from wrapped is handled a data buffer containing the raw unwrapped secret key. Ensure this data is zeroized whether the object is successfuly imported (in which case a copy of the data buffer will have been made) or the operation fails.