ginger-lib icon indicating copy to clipboard operation
ginger-lib copied to clipboard

Clearing sensitive data before exiting the code

Open mkaihara opened this issue 5 years ago • 1 comments

Please make sure that sensitive data, such as private keys, that are stored in temporary variables are cleared before exiting the function. It is not safe to just leave it out of scope as it may be exploited with attacks. Also make sure that the function that clears the data is not skipped by optimization of the compiler.

mkaihara avatar Apr 03 '20 09:04 mkaihara

I'd wait for https://github.com/rust-lang/rfcs/pull/2859 and see how dalek, etc. use it before worrying about this.

burdges avatar Apr 03 '20 10:04 burdges