Skip to content

Conversation

@cosmasken
Copy link

fix: zeroize sensitive data ( #9)

  • Zeroize all listed sensitive values (private keys, mnemonics, passwords, API keys)
    across wallet.rs, transfer.rs, interactive/wallet.rs, helper.rs,
    api/mod.rs, and wallet.rs

cosmasken and others added 4 commits October 19, 2025 11:33
- Fix L44: Zeroize temporary private key bytes in wallet.new()
- Fix L106: Zeroize plaintext after decryption in decrypt_private_key()
- Fix L34: Add Drop trait for WalletData to zeroize api_key
- Fix L74: Zeroize private_key string in transfer command
- Fix L100,L181,L330: Zeroize password strings in interactive flows
- Fix L143,L340: Zeroize private_key strings in interactive flows
- Fix L22,L25,L27: Add Drop trait for WalletAction enum

Addresses Issue 9 - Missing zeroization points for sensitive data
@cosmasken cosmasken closed this Nov 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant