On Tue, Sep 20, 2022 at 6:28 PM Lennart Poettering <lennart@xxxxxxxxxxxxxx> wrote: > I was wondering though, shouldn't the memory the seed data is stored > in be zeroed out when you dispose of it, just for safety? I mentioned the same. I think Ard is gonna handle that for v2, in addition to freeing the prior seed's allocation. > > + blake2s_final(&state, seed->bits); > > And here, shouldn't the state struct be zeroed out? (or does > blake2s_final() do that implicitly? In this case, blake2s_final does it implicitly.