Skip to content

Add secure erase for sensitive memory in WASM scanner #480

Description

@collinsadi

Derived stealth keys may linger in WASM linear memory after use.

Zero sensitive buffers after derivation in scanner Rust code and document limits of browser memory.

Acceptance criteria:

  • Sensitive buffers zeroed on drop.
  • Document states browser memory limits.
  • No regression in scan performance.

Metadata

Metadata

Assignees

No one assigned

    Labels

    p3Hardening, polish, and operational maturityprivacyPrivacy properties, metadata, and local datascannerRust/WASM scanner and event discoverysecurity relatedSecurity vulnerability or hardening work

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions