Source code
Revision control
Copy as Markdown
Other Tools
/*
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without modification,
* are permitted provided that the following conditions are met:
*
* 1. Redistributions of source code must retain the above copyright notice,
* this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright notice,
* this list of conditions and the following disclaimer in the documentation
* and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
* DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
* SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
* CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
* OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/
#ifndef SECURE_BYTES_H_
#define SECURE_BYTES_H_
#include <cstddef>
#include <cstdint>
#include <vector>
namespace rnp {
/* Defined in secure_bytes.cpp as a non-inlineable function so the compiler cannot
eliminate the zeroing as a dead store. */
void secure_wipe(void *ptr, size_t len);
/* Drop-in replacement for Botan::secure_vector<uint8_t> that carries no Botan dependency
in its header. Memory is zeroed on destruction (and before any move-from). */
class SecureBytes {
std::vector<uint8_t> data_;
public:
SecureBytes() = default;
SecureBytes(const uint8_t *first, const uint8_t *last) : data_(first, last)
{
}
SecureBytes(const uint8_t *data, size_t size) : data_(data, data + size)
{
}
SecureBytes(const std::vector<uint8_t> &v) : data_(v)
{
}
SecureBytes(std::vector<uint8_t> &&v) noexcept : data_(std::move(v))
{
}
~SecureBytes()
{
secure_wipe(data_.data(), data_.size());
}
SecureBytes(const SecureBytes &) = default;
SecureBytes &operator=(const SecureBytes &) = default;
SecureBytes(SecureBytes &&o) noexcept : data_(std::move(o.data_))
{
}
SecureBytes &
operator=(SecureBytes &&o) noexcept
{
secure_wipe(data_.data(), data_.size());
data_ = std::move(o.data_);
return *this;
}
uint8_t *
data() noexcept
{
return data_.data();
}
const uint8_t *
data() const noexcept
{
return data_.data();
}
size_t
size() const noexcept
{
return data_.size();
}
bool
empty() const noexcept
{
return data_.empty();
}
std::vector<uint8_t>::iterator
begin() noexcept
{
return data_.begin();
}
std::vector<uint8_t>::const_iterator
begin() const noexcept
{
return data_.begin();
}
std::vector<uint8_t>::iterator
end() noexcept
{
return data_.end();
}
std::vector<uint8_t>::const_iterator
end() const noexcept
{
return data_.end();
}
std::vector<uint8_t>
unlock() const
{
return data_;
}
};
} // namespace rnp
#endif