1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
use std::io;
use std::ops;
use zeroize::Zeroize;

pub struct ZeroizeBytesBuffer(Vec<u8>);

impl ZeroizeBytesBuffer {
  pub fn with_capacity(initial_capacity: usize) -> ZeroizeBytesBuffer {
    ZeroizeBytesBuffer(Vec::with_capacity(initial_capacity))
  }
}

impl ZeroizeBytesBuffer {
  pub fn append(&mut self, byte: u8) {
    if self.0.len() <= self.0.capacity() {
      let next_size = 2 * (self.0.capacity() + 1);
      let mut next_buffer = Vec::with_capacity(next_size);

      next_buffer.extend_from_slice(&self.0);

      self.0.zeroize();
      self.0 = next_buffer;
    }
    self.0.push(byte)
  }
}

impl Zeroize for ZeroizeBytesBuffer {
  fn zeroize(&mut self) {
    self.0.zeroize();
  }
}

impl Drop for ZeroizeBytesBuffer {
  fn drop(&mut self) {
    self.0.zeroize()
  }
}

impl ops::Deref for ZeroizeBytesBuffer {
  type Target = [u8];

  fn deref(&self) -> &Self::Target {
    self.0.as_ref()
  }
}

impl AsRef<[u8]> for ZeroizeBytesBuffer {
  fn as_ref(&self) -> &[u8] {
    self.0.as_ref()
  }
}

impl io::Write for ZeroizeBytesBuffer {
  fn write(&mut self, buf: &[u8]) -> io::Result<usize> {
    let avalable = self.0.capacity() - self.0.len();

    if buf.len() < avalable {
      // This should not require any reallocation
      self.0.extend_from_slice(buf);
    } else {
      // To be on the save side with create copy with larger capacity and zero out the old
      let next_size = 2 * (self.0.capacity() + buf.len());
      let mut next_buffer = Vec::with_capacity(next_size);

      next_buffer.extend_from_slice(&self.0);
      next_buffer.extend_from_slice(buf);

      self.0.zeroize();
      self.0 = next_buffer;
    }

    Ok(buf.len())
  }

  fn flush(&mut self) -> io::Result<()> {
    Ok(())
  }
}