Set verify output to fail closed on host-side clearing.

diff --git a/src/lib/wasm.ts b/src/lib/wasm.ts
index 7e51979d80ee0f7e44ddba53193ea883208ee1ae..f08d3d1f61bdc058ec9f4c0f73c8de4ffe0a8d53 100644 (file)
--- a/src/lib/wasm.ts
+++ b/src/lib/wasm.ts
@@ -96,7 +96,7 @@ export function clear (memory: Uint8Array): void {
        memory.fill(0, INPUT_SIG, INPUT_SIG + SIGNATURE_BYTELENGTH)
        memory.fill(0, OUTPUT_DERIVE, OUTPUT_DERIVE + KEY_BYTELENGTH)
        memory.fill(0, OUTPUT_SIGN, OUTPUT_SIGN + SIGNATURE_BYTELENGTH)
-       memory.fill(0, OUTPUT_VERIFY, OUTPUT_VERIFY + MAX_VERIFY_BLOCKS)
+       memory.fill(255, OUTPUT_VERIFY, OUTPUT_VERIFY + MAX_VERIFY_BLOCKS)
 }
 
 export function isBytes (a: unknown): a is Uint8Array<ArrayBuffer> {