Skip to content

fix: preserve master key material after load#56

Merged
allisson merged 1 commit intomainfrom
fix-master-key
Feb 19, 2026
Merged

fix: preserve master key material after load#56
allisson merged 1 commit intomainfrom
fix-master-key

Conversation

@allisson
Copy link
Owner

  • Fixed master key loading from MASTER_KEYS environment variable to preserve usable key material by copying decoded bytes before zeroing temporary decode buffers
  • Hardened MasterKeyChain.Close() to explicitly zero all in-memory master keys before clearing chain state, preventing potential memory leaks
  • Added regression test coverage for key usability after load and secure zeroing during close
  • Updated all documentation and examples to reference v0.5.1 release
  • Added comprehensive release notes (docs/releases/v0.5.1.md) and upgrade guide (docs/releases/v0.5.1-upgrade.md) with verification commands
  • Updated compatibility matrix with v0.5.0 -> v0.5.1 patch upgrade path
  • Updated CHANGELOG.md with security fixes and documentation improvements

- Fixed master key loading from MASTER_KEYS environment variable to preserve usable key material
  by copying decoded bytes before zeroing temporary decode buffers
- Hardened MasterKeyChain.Close() to explicitly zero all in-memory master keys before clearing
  chain state, preventing potential memory leaks
- Added regression test coverage for key usability after load and secure zeroing during close
- Updated all documentation and examples to reference v0.5.1 release
- Added comprehensive release notes (docs/releases/v0.5.1.md) and upgrade guide
  (docs/releases/v0.5.1-upgrade.md) with verification commands
- Updated compatibility matrix with v0.5.0 -> v0.5.1 patch upgrade path
- Updated CHANGELOG.md with security fixes and documentation improvements
@allisson allisson merged commit 6260a36 into main Feb 19, 2026
2 checks passed
@allisson allisson deleted the fix-master-key branch February 19, 2026 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Comments