Clear password buffer

Barquadd · Jan 1, 2023 · 0a36caa · 0a36caa
1 parent c5494e6
commit 0a36caa
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/Cargo.toml b/Cargo.toml
@@ -15,4 +15,5 @@ aes-gcm = "0.10.1"
 clap = {version="4.0.32", features=["cargo"]}
 rand = "0.8.5"
 rpassword = "7.2.0"
-sha2 = "0.10.6"
+sha2 = "0.10.6"
+zeroize = "1.5.7"
diff --git a/src/main.rs b/src/main.rs
@@ -6,6 +6,7 @@ use aes_gcm::{
 use clap::{arg, command, value_parser};
 use sha2::{Digest, Sha256};
 use std::{fs::write, path::PathBuf};
+use zeroize::Zeroize;
 
 fn hash_vec_n_times(v: &Vec<u8>, n: u32) -> Vec<u8> {
  let mut hasher = Sha256::new();
@@ -22,8 +23,9 @@ fn hash_vec_n_times(v: &Vec<u8>, n: u32) -> Vec<u8> {
 fn get_user_pass() -> Vec<u8> {
  let password = rpassword::prompt_password("Please enter a password: ").unwrap();
  let password = password.trim();
- let password: Vec<u8> = password.as_bytes().to_vec();
+ let mut password: Vec<u8> = password.as_bytes().to_vec();
  let key: Vec<u8> = hash_vec_n_times(&password, 100_000);
+ password.zeroize();
  key
 }