Crate sanitization 

Dependency-free secret memory sanitization for no_std Rust.

Default builds contain no unsafe code. The primary type is SecretBytes, a fixed-size clear-on-drop container designed for secrets that are controlled from creation through destruction.

The optional unsafe-wipe feature exposes [unsafe_wipe], an explicit volatile-write backend for ordinary mutable buffers. It is not enabled by default and is not wired into SecureSanitize implicitly; call sites must opt in by module and function name.

Important limits:

• Safe Rust cannot perform volatile writes to arbitrary &mut [u8].
• Safe Rust cannot soundly scrub old stack frames created by prior moves.
• Cache flush instructions, SIMD stores, memory locking, and assembly need target-specific unsafe code and platform policy.

Macros

secure_drop_struct

Declare a struct and generate SecureSanitize plus Drop.

secure_sanitize_struct

Declare a struct and generate SecureSanitize for all fields.

Structs

LengthError

Error returned when a caller provides a buffer with the wrong length.

Secret

Clear-on-drop wrapper for non-byte secret types.

SecretBytes

Fixed-size secret byte storage with automatic sanitization on drop.

Traits

SecureSanitize

Shared trait for values that can clear their own sensitive contents.

Functions

sanitize_bytes_best_effort

Best-effort clearing for ordinary mutable byte slices.