dcrypt-common

dcrypt-common contains small shared types used by the published dcrypt crates. It exposes:

• SecretBuffer<N> for exact-size secret byte storage that is zeroized on drop.
• SecretVec (with alloc) for exact-length allocation-backed secret storage.
• EphemeralSecret and ZeroizeGuard for scoped cleanup.
• SecureCompare and secure-operation helpers.
• compiler and memory fence helpers.
• generic integer-math and elliptic-curve data structures used by internal components.

All crate code is safe Rust and the crate root forbids unsafe code. The default std feature includes alloc; allocation-backed no_std builds select default-features = false, features = ["alloc"].

Zeroization reduces data-remanence risk for owned, initialized storage. It cannot erase caller-created copies, registers, crash dumps, or storage outside the wrapper, and it is not a substitute for target-specific compiler inspection. The crate does not provide locked memory.