kdk_zeroize/lib.rs
1//! SPDX-License-Identifier: MIT
2//!
3//! Every KDK crate that touches secret bytes pulls **this** crate
4//! rather than `zeroize` directly. We aim to be an auditable-friendly project
5//! on level at purge secret bytes correctly.
6//!
7//! # Security notice
8//!
9//! > A bug in this crate — a missed `Drop`, a leaky `Debug`, a copy that
10//! > escapes the wipe — silently breaks the amnesia guarantee across
11//! > EVERY downstream crate.
12//!
13//! Treat this crate's API surface as a **published security contract**.
14//! Breaking changes here propagate amnesia regressions
15//! through every downstream crate.
16
17#![no_std]
18#![doc(html_logo_url = "https://qlrd.github.io/kdk/logo.png")]
19
20mod sensitive;
21
22pub use sensitive::{wipe_in_place_mut, Sensitive, SensitiveBytes, SensitiveMut};
23
24pub mod prelude {
25 pub use crate::{Sensitive, SensitiveBytes, SensitiveMut};
26}