When dealing with keys and other sensitive information you often want to be sure what zeroing will not be optimized by compiler. Is there a way to do it reliably in pure stable Rust without relying on C bindings?
memsec is that I need. But I need a
no_std capability, but it looks like it can be easily added to your crate. Small question: that practical implications of using
memset_s or in case of
RtlSecureZeroMemory? Have you tried to compare resulting assembler?
memcmp, are you sure it’s guaranteed to be constant time? I thought only reliable way to do it is to write asm directly.