asjeeves-encryption 0.1.0

Encryption and Key utilities.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

use std::fmt;
use std::ops::Deref;
use std::pin::Pin;

use zeroize::{Zeroize, Zeroizing};

/// NewType wrapper for sensitive values
/// - Uses `Zeroizing` to ensure the value is zero'ed out when
///   it leaves scope.
/// - Uses `Debug` to ensure its not leaked through logs and tracing.
/// - Uses `Pin` to ensure it cannot move (which can cause leakes)
pub struct Sensitive<T: Zeroize>(Pin<Box<Zeroizing<T>>>);

impl<T> Sensitive<T>
where
    T: Zeroize,
{
    pub fn new(inner: T) -> Self {
        let inner = Zeroizing::new(inner);
        let inner = Box::pin(inner);

        Self(inner)
    }
}
impl<T> fmt::Debug for Sensitive<T>
where
    T: Zeroize,
{
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        f.debug_struct("Sensitive").finish_non_exhaustive()
    }
}

impl<T> Deref for Sensitive<T>
where
    T: Deref + Zeroize,
{
    type Target = T;

    fn deref(&self) -> &Self::Target {
        self.0.deref()
    }
}