make it a feature

Author: laudiacay

blake2/Cargo.toml

@@ -18,7 +18,7 @@ crypto-mac = "0.8"
 digest = "0.9"
 opaque-debug = "0.3"
 subtle = { version = ">=2, <2.5", default-features = false }
-zeroize = { version = "1.5.7", features = ["zeroize_derive"] }
+zeroize = { version = "1.5.7", features = ["zeroize_derive"], default-features = false, optional = true }
 
 [dev-dependencies]
 crypto-mac = { version = "0.8", features = ["dev"] }
@@ -40,6 +40,7 @@ blake2s = []
 # performance. This feature disables some inlining, improving the performance
 # of the portable implementation in that specific case.
 uninline_portable = []
+zeroize = ["zeroize/zeroize_derive"]
 
 [package.metadata.docs.rs]
 all-features = true

blake2/src/blake2b.rs

@@ -44,6 +44,7 @@ use digest::{
     generic_array::GenericArray,
     BlockInput, FixedOutputDirty, InvalidOutputSize, Reset, Update, VariableOutputDirty,
 };
+#[cfg(feature = "zeroize")]
 use zeroize::ZeroizeOnDrop;
 
 pub(crate) type Word = u64;
@@ -109,7 +110,8 @@ pub fn blake2b(input: &[u8]) -> Hash {
 }
 
 /// Blake2b instance with a fixed output.
-#[derive(Clone, Default, ZeroizeOnDrop)]
+#[derive(Clone, Default)]
+#[cfg_attr(feature = "zeroize", derive(ZeroizeOnDrop))]
 pub struct Blake2b {
     params: Params,
     state: State,
@@ -193,7 +195,8 @@ opaque_debug::implement!(Blake2b);
 digest::impl_write!(Blake2b);
 
 /// Blake2b instance with a variable output.
-#[derive(Clone, Default, ZeroizeOnDrop)]
+#[derive(Clone, Default)]
+#[cfg_attr(feature = "zeroize", derive(ZeroizeOnDrop))]
 pub struct VarBlake2b {
     params: Params,
     state: State,

blake2/src/blake2b/backend.rs

@@ -9,6 +9,7 @@ mod sse41;
 use super::*;
 use arrayref::array_ref;
 use core::cmp;
+#[cfg(feature = "zeroize")]
 use zeroize::Zeroize;
 
 #[cfg(any(target_arch = "x86", target_arch = "x86_64"))]
@@ -139,6 +140,7 @@ impl Implementation {
     }
 }
 
+#[cfg(feature = "zeroize")]
 impl Zeroize for Implementation {
     fn zeroize(&mut self) {
         // Nothing to do.
@@ -188,6 +190,7 @@ pub enum LastNode {
     No,
 }
 
+#[cfg(feature = "zeroize")]
 impl Zeroize for LastNode {
     fn zeroize(&mut self) {
         // Nothing to do.

blake2/src/blake2b/params.rs

@@ -3,6 +3,7 @@ use super::{
 };
 use arrayref::array_refs;
 use core::fmt;
+#[cfg(feature = "zeroize")]
 use zeroize::ZeroizeOnDrop;
 
 /// A parameter builder that exposes all the non-default BLAKE2 features.
@@ -29,7 +30,8 @@ use zeroize::ZeroizeOnDrop;
 /// // Or use those params to build an incremental State.
 /// let mut state = params.to_state();
 /// ```
-#[derive(Clone, ZeroizeOnDrop)]
+#[derive(Clone)]
+#[cfg_attr(feature = "zeroize", derive(ZeroizeOnDrop))]
 pub struct Params {
     pub(super) hash_length: u8,
     pub(super) key_length: u8,

blake2/src/blake2b/state.rs

@@ -2,6 +2,7 @@ use super::{backend, Count, Hash, Params, Word, BLOCKBYTES, OUTBYTES};
 use arrayref::mut_array_refs;
 use core::{cmp, fmt, mem::size_of};
 
+#[cfg(feature = "zeroize")]
 use zeroize::ZeroizeOnDrop;
 
 /// An incremental hasher for BLAKE2b.
@@ -21,7 +22,8 @@ use zeroize::ZeroizeOnDrop;
 /// state.update(b"bar");
 /// assert_eq!(blake2b(b"foobar"), state.finalize());
 /// ```
-#[derive(Clone, ZeroizeOnDrop)]
+#[derive(Clone)]
+#[cfg_attr(feature = "zeroize", derive(ZeroizeOnDrop))]
 pub struct State {
     pub(super) words: [Word; 8],
     pub(super) count: Count,

blake2/src/blake2s.rs

@@ -43,6 +43,7 @@ use digest::{
     generic_array::GenericArray,
     BlockInput, FixedOutputDirty, InvalidOutputSize, Reset, Update, VariableOutputDirty,
 };
+#[cfg(feature = "zeroize")]
 use zeroize::ZeroizeOnDrop;
 
 pub(crate) type Word = u32;
@@ -98,7 +99,8 @@ pub fn blake2s(input: &[u8]) -> Hash {
 }
 
 /// Blake2s instance with a fixed output.
-#[derive(Clone, Default, ZeroizeOnDrop)]
+#[derive(Clone, Default)]
+#[cfg_attr(feature = "zeroize", derive(ZeroizeOnDrop))]
 pub struct Blake2s {
     params: Params,
     state: State,
@@ -182,7 +184,8 @@ opaque_debug::implement!(Blake2s);
 digest::impl_write!(Blake2s);
 
 /// Blake2s instance with a variable output.
-#[derive(Clone, Default, ZeroizeOnDrop)]
+#[derive(Clone, Default)]
+#[cfg_attr(feature = "zeroize", derive(ZeroizeOnDrop))]
 pub struct VarBlake2s {
     params: Params,
     state: State,

blake2/src/blake2s/backend.rs

@@ -9,6 +9,7 @@ mod sse41;
 use super::*;
 use arrayref::array_ref;
 use core::cmp;
+#[cfg(feature = "zeroize")]
 use zeroize::Zeroize;
 
 #[cfg(any(target_arch = "x86", target_arch = "x86_64"))]
@@ -137,6 +138,7 @@ impl Implementation {
     }
 }
 
+#[cfg(feature = "zeroize")]
 impl Zeroize for Implementation {
     fn zeroize(&mut self) {
         // Nothing to do.
@@ -186,6 +188,7 @@ pub enum LastNode {
     No,
 }
 
+#[cfg(feature = "zeroize")]
 impl Zeroize for LastNode {
     fn zeroize(&mut self) {
         // Nothing to do.

blake2/src/blake2s/params.rs

@@ -3,6 +3,7 @@ use super::{
 };
 use arrayref::array_refs;
 use core::fmt;
+#[cfg(feature = "zeroize")]
 use zeroize::ZeroizeOnDrop;
 
 /// A parameter builder that exposes all the non-default BLAKE2 features.
@@ -29,7 +30,8 @@ use zeroize::ZeroizeOnDrop;
 /// // Or use those params to build an incremental State.
 /// let mut state = params.to_state();
 /// ```
-#[derive(Clone, ZeroizeOnDrop)]
+#[derive(Clone)]
+#[cfg_attr(feature = "zeroize", derive(ZeroizeOnDrop))]
 pub struct Params {
     pub(super) hash_length: u8,
     pub(super) key_length: u8,

blake2/src/blake2s/state.rs

@@ -1,6 +1,7 @@
 use super::{backend, Count, Hash, Params, Word, BLOCKBYTES, OUTBYTES};
 use arrayref::mut_array_refs;
 use core::{cmp, fmt, mem::size_of};
+#[cfg(feature = "zeroize")]
 use zeroize::ZeroizeOnDrop;
 
 /// An incremental hasher for BLAKE2s.
@@ -20,7 +21,8 @@ use zeroize::ZeroizeOnDrop;
 /// state.update(b"bar");
 /// assert_eq!(blake2s(b"foobar"), state.finalize());
 /// ```
-#[derive(Clone, ZeroizeOnDrop)]
+#[derive(Clone)]
+#[cfg_attr(feature = "zeroize", derive(ZeroizeOnDrop))]
 pub struct State {
     pub(super) words: [Word; 8],
     pub(super) count: Count,