From dfee5bea0c5fdb9bc9de4ea9c104fe82b6e76feb Mon Sep 17 00:00:00 2001 From: Chris Duncan Date: Tue, 4 Aug 2026 22:40:05 -0700 Subject: [PATCH] Clear copied key parts after use. --- src/lib/vault/vault-worker.ts | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/lib/vault/vault-worker.ts b/src/lib/vault/vault-worker.ts index fd69f78..2e8773b 100644 --- a/src/lib/vault/vault-worker.ts +++ b/src/lib/vault/vault-worker.ts @@ -248,8 +248,11 @@ function sign (index?: number, data?: ArrayBuffer): Promise { const prv = new Uint8Array(result) const pub = nano25519_derive(prv) - const sig = nano25519_sign(new Uint8Array(data), new Uint8Array([...prv, ...pub])) + const sk = new Uint8Array([...prv, ...pub]) prv.fill(0) + pub.fill(0) + const sig = nano25519_sign(new Uint8Array(data), sk) + sk.fill(0) _timer = new VaultTimer(_autolock, _timeout) return { signature: sig.buffer } }) -- 2.52.0