Sensitive values not automatically zeroized on drop include:
- Shamir share matrices stored as Array2
- Collected secret-share matrices
- Collected smudging-share matrices
- The ordinary Poly returned by aggregate_collected_shares
- Smudging coefficients returned as Vec
- Example-held sk_poly_sum and es_poly_sum
Poly implements Zeroize, but ordinary Poly values are not automatically erased unless wrapped in Zeroizing or explicitly zeroized. SecretKey has stronger drop handling.
Smudging noise is also sensitive: disclosure can remove the masking from a recorded decryption transcript.
Verdict: Valid Low hardening finding. Use zeroizing wrappers or dedicated secret/noise types. Arrays and arbitrary-precision integers may require explicit zeroization support or controlled representations.
Sensitive values not automatically zeroized on drop include:
Poly implements Zeroize, but ordinary Poly values are not automatically erased unless wrapped in Zeroizing or explicitly zeroized. SecretKey has stronger drop handling.
Smudging noise is also sensitive: disclosure can remove the masking from a recorded decryption transcript.
Verdict: Valid Low hardening finding. Use zeroizing wrappers or dedicated secret/noise types. Arrays and arbitrary-precision integers may require explicit zeroization support or controlled representations.