ascon-aead: Add ascon sponge Zeroize feature (#527)

Not zeroizing the state may expose the private key.
RustCrypto · Oct 24, 2023 · 96fd7cf · 96fd7cf
1 parent 9f3d08a
commit 96fd7cf
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 2 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/ascon-aead/Cargo.toml b/ascon-aead/Cargo.toml
@@ -17,7 +17,7 @@ rust-version = "1.56"
 [dependencies]
 aead = { version = "0.5", default-features = false }
 subtle = { version = "2", default-features = false }
-zeroize = { version = "1.6", optional = true, default-features = false, features = [
+zeroize_crate = { package = "zeroize", version = "1.6", optional = true, default-features = false, features = [
     "derive",
 ] }
 ascon = "0.4"
@@ -27,14 +27,15 @@ hex-literal = "0.3"
 aead = { version = "0.5", features = ["alloc"] }
 
 [features]
-default = ["alloc", "getrandom", "zeroize"]
+default = ["alloc", "getrandom"]
 std = ["aead/std", "alloc"]
 alloc = ["aead/alloc"]
 arrayvec = ["aead/arrayvec"]
 getrandom = ["aead/getrandom", "rand_core"]
 heapless = ["aead/heapless"]
 rand_core = ["aead/rand_core"]
 stream = ["aead/stream"]
+zeroize = ["zeroize_crate", "ascon/zeroize"]
 
 [package.metadata.docs.rs]
 all-features = true

diff --git a/ascon-aead/src/lib.rs b/ascon-aead/src/lib.rs
@@ -98,6 +98,9 @@
 //! Similarly, enabling the `arrayvec` feature of this crate will provide an impl of
 //! [`aead::Buffer`] for `arrayvec::ArrayVec`.
 
+#[cfg(feature = "zeroize")]
+extern crate zeroize_crate as zeroize;
+
 pub use aead::{self, Error, Key, Nonce, Tag};
 use aead::{
     consts::{U0, U16, U20},