From: Chris Duncan <chris@zoso.dev>
Date: Sat, 29 Aug 2026 04:56:18 +0000 (-0700)
Subject: Set verify output to fail closed on host-side clearing.
X-Git-Url: https://git.codecow.com/?a=commitdiff_plain;h=bc9614528f9f948ba13638e1540b26ced1bd54d2;p=nano25519.git

Set verify output to fail closed on host-side clearing.
---

diff --git a/src/lib/wasm.ts b/src/lib/wasm.ts
index 7e51979..f08d3d1 100644
--- a/src/lib/wasm.ts
+++ b/src/lib/wasm.ts
@@ -96,7 +96,7 @@ export function clear (memory: Uint8Array): void {
 	memory.fill(0, INPUT_SIG, INPUT_SIG + SIGNATURE_BYTELENGTH)
 	memory.fill(0, OUTPUT_DERIVE, OUTPUT_DERIVE + KEY_BYTELENGTH)
 	memory.fill(0, OUTPUT_SIGN, OUTPUT_SIGN + SIGNATURE_BYTELENGTH)
-	memory.fill(0, OUTPUT_VERIFY, OUTPUT_VERIFY + MAX_VERIFY_BLOCKS)
+	memory.fill(255, OUTPUT_VERIFY, OUTPUT_VERIFY + MAX_VERIFY_BLOCKS)
 }
 
 export function isBytes (a: unknown): a is Uint8Array<ArrayBuffer> {