From: Chris Duncan <chris@zoso.dev>
Date: Fri, 8 Aug 2025 21:36:00 +0000 (-0700)
Subject: Erase encoded secrets after encrypting them.
X-Git-Tag: v0.10.5~41^2~161
X-Git-Url: https://git.codecow.com/?a=commitdiff_plain;h=1bf2f12343e05e5a7784b1cce75ebc3926957f9e;p=libnemo.git

Erase encoded secrets after encrypting them.
---

diff --git a/src/lib/safe.ts b/src/lib/safe.ts
index 5b965bc..c971827 100644
--- a/src/lib/safe.ts
+++ b/src/lib/safe.ts
@@ -363,6 +363,7 @@ export class Safe {
 		const additionalData = utf8.toBytes(this.#type)
 		const encoded = new Uint8Array([...seed, ...mnemonic])
 		const encrypted = await crypto.subtle.encrypt({ name: 'AES-GCM', iv, additionalData }, key, encoded)
+		encoded.fill(0)
 		return { iv, encrypted }
 	}