Skip to content

Conversation

@sandlbn
Copy link
Contributor

@sandlbn sandlbn commented Jun 11, 2025

Implement secure key zeroization using the zeroize crate to prevent sensitive cryptographic data from lingering in memory after use.

Changes:

  • Add zeroize dependency with ZeroizeOnDrop for automatic cleanup
  • Wrap private keys in SecurePrivateKey struct that zeroizes on drop
  • Ensure all temporary buffers containing key material are cleared
  • Add tests for zeroization behavior

Do not merge: Depends on IntelLabs/atlas-c2pa-lib#13

@sandlbn sandlbn marked this pull request as ready for review June 11, 2025 23:58
Copy link
Contributor

@marcelamelara marcelamelara left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for these changes, this LGTM! Sorry for the long delay on this PR.

@sandlbn sandlbn merged commit 452e0f3 into main Jul 22, 2025
2 checks passed
@marcelamelara marcelamelara deleted the feature/verify-sig branch July 22, 2025 17:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants