Unlike other crates in AEADs, and other RustCrypto respositories, the xaes-256-gcm crate does not offer an optional zeroize feature or implement the ZeroizeOnDrop trait. While zeroization is generally a defense in depth attribute and not a security guarantee, offering zeroization in the xaes-256-gcm crate would decrease attack surface area for recovering key data.
The majority of sensitive data handling in xaes-256-gcm is via the underlying aes256gcm operation. aes, aes_gcm, and cipher, all currently implement the zeroize feature and could be used to add the feature to xaes-256-gcm.
Unlike other crates in
AEADs, and other RustCrypto respositories, thexaes-256-gcmcrate does not offer an optionalzeroizefeature or implement theZeroizeOnDroptrait. While zeroization is generally a defense in depth attribute and not a security guarantee, offering zeroization in thexaes-256-gcmcrate would decrease attack surface area for recovering key data.The majority of sensitive data handling in
xaes-256-gcmis via the underlyingaes256gcmoperation.aes,aes_gcm, andcipher, all currently implement thezeroizefeature and could be used to add the feature toxaes-256-gcm.