Struct secstr::SecureVec

pub struct SecureVec<T>where
    T: Sized + Copy + Zeroize,{ /* private fields */ }

A data type suitable for storing sensitive information such as passwords and private keys in memory, that implements:

• Automatic zeroing in Drop
• Constant time comparison in PartialEq (does not short circuit on the first different character; but terminates instantly if strings have different length)
• Outputting ***SECRET*** to prevent leaking secrets into logs in fmt::Debug and fmt::Display
• Automatic mlock to protect against leaking into swap (any unix)
• Automatic madvise(MADV_NOCORE/MADV_DONTDUMP) to protect against leaking into core dumps (FreeBSD, DragonflyBSD, Linux)

Comparisons using the PartialEq implementation are undefined behavior (and most likely wrong) if T has any padding bytes.

Be careful with SecureBytes::from: if you have a borrowed string, it will be copied. Use SecureBytes::new if you have a Vec<u8>.

Implementations

impl<T> SecureVec<T>where T: Sized + Copy + Zeroize,

pub fn new(cont: Vec<T>) -> Self

pub fn unsecure(&self) -> &[T]

Borrow the contents of the string.

pub fn unsecure_mut(&mut self) -> &mut [T]

Mutably borrow the contents of the string.

pub fn resize(&mut self, new_len: usize, value: T)

Resizes the SecureVec in-place so that len is equal to new_len.

If new_len is smaller the inner vector is truncated. If new_len is larger the inner vector will grow, placing value in all new cells.

This ensures that the new memory region is secured if reallocation occurs.

Similar to Vec::resize

pub fn zero_out(&mut self)

Overwrite the string with zeros. This is automatically called in the destructor.

This also sets the length to 0.

Trait Implementations

impl<T> Borrow<[T]> for SecureVec<T>where T: Sized + Copy + Zeroize,

fn borrow(&self) -> &[T]

Immutably borrows from an owned value.

impl<T> BorrowMut<[T]> for SecureVec<T>where T: Sized + Copy + Zeroize,

fn borrow_mut(&mut self) -> &mut [T]

Mutably borrows from an owned value.

impl<T: Copy + Zeroize> Clone for SecureVec<T>

fn clone(&self) -> Self

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<T> Debug for SecureVec<T>where T: Sized + Copy + Zeroize,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<T> Display for SecureVec<T>where T: Sized + Copy + Zeroize,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<T> Drop for SecureVec<T>where T: Sized + Copy + Zeroize,

fn drop(&mut self)

Executes the destructor for this type.

impl<T, U> From<U> for SecureVec<T>where U: Into<Vec<T>>, T: Sized + Copy + Zeroize,

fn from(s: U) -> SecureVec<T>

Converts to this type from the input type.

impl FromStr for SecureVec<u8>

type Err = Infallible

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self, Self::Err>

Parses a string s to return a value of this type.

impl<T, U> Index<U> for SecureVec<T>where T: Sized + Copy + Zeroize, Vec<T>: Index<U>,

type Output = <Vec<T> as Index<U>>::Output

The returned type after indexing.

fn index(&self, index: U) -> &Self::Output

Performs the indexing (container[index]) operation.

impl<T> PartialEq for SecureVec<T>where T: Sized + Copy + Zeroize + NoPaddingBytes,

fn eq(&self, other: &SecureVec<T>) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<T> Eq for SecureVec<T>where T: Sized + Copy + Zeroize + NoPaddingBytes,