des: zeroize key (#467)

RustCrypto · Feb 11, 2025 · b40a003 · b40a003
1 parent e83fa48
commit b40a003
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 4 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -28,4 +28,6 @@ opt-level = 2
 
 [patch.crates-io]
 # https://github.com/RustCrypto/traits/pull/1742
+# https://github.com/RustCrypto/traits/pull/1747
+cipher        = { git = "https://github.com/RustCrypto/traits.git" }
 crypto-common = { git = "https://github.com/RustCrypto/traits.git" }
diff --git a/des/src/tdes.rs b/des/src/tdes.rs
@@ -12,10 +12,13 @@ use cipher::{
 use core::fmt;
 
 #[cfg(feature = "zeroize")]
-use cipher::zeroize::ZeroizeOnDrop;
+use cipher::zeroize::{ZeroizeOnDrop, Zeroizing};
 
 #[inline]
 fn weak_key_test<const SIZE: usize, U: KeyInit>(key: &Key<U>) -> Result<(), WeakKeyError> {
+    #[cfg(feature = "zeroize")]
+    let mut tmp = Zeroizing::new(Key::<U>::default());
+    #[cfg(not(feature = "zeroize"))]
     let mut tmp = Key::<U>::default();
 
     for i in 0..<U as KeySizeUser>::KeySize::USIZE {