Security Topics

Security decisions often span several library domains. These topics explain the boundaries and limitations that developers must consider when handling sensitive values.

• About Sensitive Strings and Byte Blocks
  • Choosing Storage for a Secret
  • Receiving Sensitive Values
  • Allocation-Level Marking
  • Building and Copying Sensitive Values
    • Borrowed Views and Conversions
    • Copies Made Before Marking
  • When Erasure Happens
  • Comparison Timing
  • Limits of the Guarantee
• Erasing Memory in a Secure Way
  • Why and When to Erase Memory
  • Shared Byte Blocks Need Shared-Ownership Awareness
  • Fixed Arrays and Borrowed Spans
  • Uniquely Owned Dynamic Buffers
  • Sensitive Byte Ring Buffers and Consumed-Data Erasure
  • Sensitive Storage versus Explicit Memory Erasure