fix(toxencryptsave): Wipe salt and passkey after usage.

Green-Sky · Green-Sky · commit 82dcbd12d675 · 2025-10-25T12:10:26.000+02:00
diff --git a/toxencryptsave/toxencryptsave.c b/toxencryptsave/toxencryptsave.c
@@ -55,6 +55,9 @@ struct Tox_Pass_Key {
 
 void tox_pass_key_free(Tox_Pass_Key *key)
 {
+    /* wipe sensitive state */
+    crypto_memzero(key->salt, TOX_PASS_SALT_LENGTH);
+    crypto_memzero(key->key, TOX_PASS_KEY_LENGTH);
     free(key);
 }
 

Original file line number	Diff line number	Diff line change
`@@ -55,6 +55,9 @@ struct Tox_Pass_Key {`
`55`	`55`
`56`	`56`	`void tox_pass_key_free(Tox_Pass_Key *key)`
`57`	`57`	`{`
	`58`	`+ /* wipe sensitive state */`
	`59`	`+ crypto_memzero(key->salt, TOX_PASS_SALT_LENGTH);`
	`60`	`+ crypto_memzero(key->key, TOX_PASS_KEY_LENGTH);`
`58`	`61`	`free(key);`
`59`	`62`	`}`
`60`	`63`