Skip to content

Sanitization 1.0.0-rc.4

Pre-release
Pre-release

Choose a tag to compare

View all tags
@eldryoth eldryoth released this 06 Jun 07:54
· 91 commits to main since this release
v1.0.0-rc.4
This tag was signed with the committer’s verified signature.
eldryoth
SSH Key Fingerprint: EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4
Verified
Learn about vigilant mode.
41ad77c
This commit was signed with the committer’s verified signature.
eldryoth
SSH Key Fingerprint: EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4
Verified
Learn about vigilant mode.

sanitization v1.0.0-rc.4

Security hardening release candidate.

Changed

  • Hardened equal-length comparison loops against optimizer-introduced short-circuiting.
  • Added SecretBytes::expose_secret_volatile behind unsafe-wipe.
  • Switched SecretVec and SecretString growth to exponential capacity growth.
  • Improved documentation around abort behavior, best-effort clearing limits, LTO, and unsafe string wiping.

Verification

  • Full local check script passed.
  • Tag is signed: v1.0.0-rc.4.
Assets 2
Loading
0 Join discussion