Zeroing secret keys on drop operations

rust-bitcoin · Jun 19, 2021 · e551795 · e551795
1 parent 2694a35
commit e551795
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/secp256k1-sys/src/lib.rs b/secp256k1-sys/src/lib.rs
@@ -224,6 +224,12 @@ pub struct KeyPair([c_uchar; 96]);
 impl_array_newtype!(KeyPair, c_uchar, 96);
 impl_raw_debug!(KeyPair);
 
+impl Drop for KeyPair {
+    fn drop(&mut self) {
+        self.0.copy_from_slice(&[0u8; 96]);
+    }
+}
+
 impl KeyPair {
     /// Creates an "uninitialized" FFI keypair which is zeroed out
     ///

diff --git a/src/key.rs b/src/key.rs
@@ -32,6 +32,12 @@ pub struct SecretKey(pub(crate) [u8; constants::SECRET_KEY_SIZE]);
 impl_ptr_newtype!(SecretKey, u8);
 impl_safe_debug!(SecretKey);
 
+impl Drop for SecretKey {
+    fn drop(&mut self) {
+        self.0.copy_from_slice(&[0u8; constants::SECRET_KEY_SIZE]);
+    }
+}
+
 impl str::FromStr for SecretKey {
     type Err = Error;
     fn from_str(s: &str) -> Result<SecretKey, Error> {