Struct ZeroizingVec 

pub struct ZeroizingVec(/* private fields */);

A wrapper for decrypted private key material that is zeroized on drop.

This type should be used whenever working with unencrypted private key bytes to ensure the sensitive data is securely erased from memory.

For long-lived key storage, prefer LockedVec which additionally pins memory to RAM and excludes it from core dumps.

Example

let decrypted = ZeroizingVec::new(decrypt_private_key(encrypted)?);
// Use decrypted key...
// When decrypted goes out of scope, memory is automatically zeroized

Implementations

impl ZeroizingVec

pub fn new(data: Vec<u8>) -> Self

Create a new ZeroizingVec from a Vec<u8>.

The input Vec’s contents are moved into the ZeroizingVec.

pub fn as_slice(&self) -> &[u8]

Get a reference to the underlying bytes.

pub fn len(&self) -> usize

Get the length of the key material.

pub fn is_empty(&self) -> bool

Check if the key material is empty.

Trait Implementations

impl AsRef<[u8]> for ZeroizingVec

fn as_ref(&self) -> &[u8]

Converts this type into a shared reference of the (usually inferred) input type.

impl Clone for ZeroizingVec

fn clone(&self) -> ZeroizingVec

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ZeroizingVec

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for ZeroizingVec

fn drop(&mut self)

Executes the destructor for this type.

impl Zeroize for ZeroizingVec

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.

impl ZeroizeOnDrop for ZeroizingVec