Zeroize PrivateKey (#112)

Author: leighmcculloch

Cargo.lock

@@ -6,9 +6,9 @@ repository = "https://github.com/stellar/rs-stellar-strkey"
 authors = ["Stellar Development Foundation <info@stellar.org>"]
 license = "Apache-2.0"
 readme = "README.md"
-version = "0.0.16"
+version = "0.0.17"
 edition = "2021"
-rust-version = "1.81.0"
+rust-version = "1.87.0"
 
 [features]
 default = []
@@ -31,7 +31,8 @@ serde_test = "1.0.177"
 
 [dependencies]
 data-encoding = { version = "2.6.0", default-features = false }
-heapless = { version = "0.8", default-features = false }
+heapless = { version = "0.9", default-features = false, features = ["zeroize"] }
+zeroize = { version = "1", default-features = false, features = ["derive"] }
 clap = { version = "4.2.4", default-features = false, features = ["std", "derive", "usage", "help"], optional = true }
 serde_with = { version = "3.11.0", optional = true, features = ["hex"] }
 serde = { version = "1", optional = true, features = ["derive"] }

Cargo.toml

@@ -15,6 +15,12 @@ fuzz:
 fuzz-compare-v13:
 	cargo +nightly fuzz run fuzz_compare_v13 -j 4
 
+fuzz-compare-v16:
+	cargo +nightly fuzz run fuzz_compare_v16 -j 4
+
+fuzz-compare-zeroizing:
+	cargo +nightly fuzz run fuzz_compare_zeroizing -j 4
+
 # Generate coverage report as text summary and HTML with source highlighting.
 fuzz-coverage:
 	rustup component add --toolchain nightly llvm-tools-preview

Makefile

@@ -9,6 +9,8 @@ cargo-fuzz = true
 
 [dependencies]
 libfuzzer-sys = "0.4"
+heapless = { version = "0.9", default-features = false, features = ["zeroize"] }
+zeroize = { version = "1", default-features = false }
 
 [dependencies.stellar-strkey]
 path = ".."
@@ -17,6 +19,10 @@ path = ".."
 package = "stellar-strkey"
 version = "0.0.13"
 
+[dependencies.stellar-strkey-v16]
+package = "stellar-strkey"
+version = "0.0.16"
+
 [[bin]]
 name = "fuzz_roundtrip"
 path = "fuzz_targets/fuzz_roundtrip.rs"
@@ -30,3 +36,17 @@ path = "fuzz_targets/fuzz_compare_v13.rs"
 test = false
 doc = false
 bench = false
+
+[[bin]]
+name = "fuzz_compare_v16"
+path = "fuzz_targets/fuzz_compare_v16.rs"
+test = false
+doc = false
+bench = false
+
+[[bin]]
+name = "fuzz_compare_zeroizing"
+path = "fuzz_targets/fuzz_compare_zeroizing.rs"
+test = false
+doc = false
+bench = false

fuzz/Cargo.lock

@@ -0,0 +1 @@
+MAC=U74P

fuzz/Cargo.toml

@@ -0,0 +1 @@
+PA7QYNF7SO2SOWQ3GLR2BGMZEHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA7QYNF7SOWQ3GLR2SOWQ3GLR2BGMZEHWQ3GLR2SOWQ3GLR2BGMZEHAAAA

fuzz/corpus/fuzz_compare_v16/0077f5d44970e20dfff5388ea003809ede53cf5e

@@ -0,0 +1 @@
+LLLDL=LL=

fuzz/corpus/fuzz_compare_v16/0766bf41b7a7ffa28561a61e8f887bc1367660fb

@@ -0,0 +1 @@
+I3ADPF7S7MGXUA74P7UJUAAAAAIAAAAAAPPAAAOWGXUA74P7UJUAAAAAIAAAAAAPPAAAOWQAAAAIAPA7A3GLR2BGMZEHXAVIRZA4KVWLTJJFC7AAAAAAAAAAAAAAAAAKB5