From 1cda0fbc680a730f51f43fc2c4ee3ce87b6f51d3 Mon Sep 17 00:00:00 2001 From: Chris Duncan Date: Wed, 5 Aug 2026 16:43:01 -0700 Subject: [PATCH] Clear buffers in Tools, but only local ones. --- src/lib/tools.ts | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/src/lib/tools.ts b/src/lib/tools.ts index f346d36..ee3d09d 100644 --- a/src/lib/tools.ts +++ b/src/lib/tools.ts @@ -198,7 +198,10 @@ export function verify (publicKey: string | ArrayBuffer | Bytes, signature: stri return nano25519_verify(s, utf8.toBytes(input), k) } catch (err) { throw new Error('Failed to verify signature', { cause: err }) - } + } finally { + k.fill(0) + s.fill(0) + } } function normalize (input: string | ArrayBuffer | Bytes): Bytes { @@ -206,5 +209,5 @@ function normalize (input: string | ArrayBuffer | Bytes): Bytes { ? hex.toBytes(input) : input instanceof ArrayBuffer ? new Uint8Array(input.slice()) - : input + : new Uint8Array(input) } -- 2.52.0