fix: wipe long-lived credential copies from memory

Session-only credentials (kept for a whole session so reconnects don't
re-prompt), credentials pending until a connection succeeds, and the
credential prompt's text buffer are now Zeroizing and wiped when
dropped, including when a prompt is cancelled or abandoned
(SEC-20261012-007, partial).

Still open: the values handed to the protocol clients are plain Strings
for the duration of authentication, egui keeps its own copies of typed
text, and no mlock/PR_SET_DUMPABLE is applied.

This commit is contained in:

Andy Dixon

2026-10-12 09:37:23 +01:00

parent c6ee9a8f36

commit 0d0b3a7c75

5 changed files with 29 additions and 13 deletions

rust/Cargo.lock

Generated

View File

@@ -2812,6 +2812,7 @@ dependencies = [
  "serde",
  "serde_json",
  "winresource",
  "zeroize",
 ]
 [[package]]