Idea: traits for zeroizing before and after move

[bascule]

@newpavlov curious if you saw the "stack bleaching" approach as an alternative to this:

Annotations for zeroing the stack of "sensitive" functions which deal in transient secrets

At the latest High Assurance Cryptography Workshop we discussed a number of ways to improve assurances for cryptographic software written in Rust. One of the ideas that came out of those discussions was a way to annotate functions which deal in transient secrets, e.g. a #[sensitive] attribute: #[sensitive] pub fn secret_key_op(key: &Key, plaintext: &[u8]) -> Vec<u8> { [...] } There are several ways an attribute like this could potentially affect the execution of that particular function, p…

(Edit: d'oh you linked it already! )