feat(security): zeroize long-lived engine key material on drop #238

Merged

KofTwentyTwo merged 1 commits from story/m6-zeroize-keys into dev

2026-07-30 03:10:02 +00:00

Author	SHA1	Message	Date
James Maes	793a10436e	feat(security): zeroize long-lived engine key material on drop Wrap DatabaseEngine's storage/WORM/ledger keys, WebhookDispatcher's HMAC secret, and add_account's transient password in zeroize::Zeroizing so their backing memory is overwritten once the holding struct drops, instead of lingering as plain heap bytes for the rest of the process lifetime. Refs #199, #163	2026-07-29 22:07:42 -05:00

Author

SHA1

Message

Date

James Maes

793a10436e

feat(security): zeroize long-lived engine key material on drop

Wrap DatabaseEngine's storage/WORM/ledger keys, WebhookDispatcher's
HMAC secret, and add_account's transient password in
zeroize::Zeroizing so their backing memory is overwritten once the
holding struct drops, instead of lingering as plain heap bytes for
the rest of the process lifetime.

Refs #199, #163

2026-07-29 22:07:42 -05:00