fix: zeroize access keys

banyancomputer · Feb 17, 2024 · b35b909 · b35b909
1 parent 8929442
commit b35b909
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/codec/crypto/access_key.rs b/src/codec/crypto/access_key.rs
@@ -2,14 +2,15 @@ use chacha20poly1305::{AeadInPlace, Key as ChaChaKey, KeyInit, XChaCha20Poly1305
 use ecdsa::signature::rand_core::CryptoRngCore;
 use nom::AsBytes;
 use rand::Rng;
+use zeroize::{Zeroize, ZeroizeOnDrop};
 
 use crate::codec::crypto::{
     AsymLockedAccessKey, AuthenticationTag, Nonce, SymLockedAccessKey, VerifyingKey,
 };
 
 const ACCESS_KEY_LENGTH: usize = 32;
 
-#[derive(Clone)]
+#[derive(Clone, Zeroize, ZeroizeOnDrop)]
 pub struct AccessKey([u8; ACCESS_KEY_LENGTH]);
 
 impl AccessKey {