Security Topics

Security decisions often span several library domains. These topics explain the boundaries and limitations that developers must consider when handling sensitive values.

• About Sensitive Strings and Byte Blocks
  • Marked Strings and Byte Storage
  • Allocation-Level Marking
  • Propagation Is Type-Specific
  • Formatting and Ordinary Conversions
  • When Erasure Happens
  • Comparison Timing
  • Creating Sensitive Values
  • Import Boundaries
  • Choosing a Type
  • Limits of the Guarantee
• Erasing Memory in a Secure Way
  • Why and When to Erase Memory
  • Shared Byte Blocks Need Shared-Ownership Awareness
  • Fixed Arrays and Borrowed Spans
  • Uniquely Owned Dynamic Buffers
  • Queues That Discard Data Over Time
  • Choosing the Boundary