A Rust library that provides secure memory handling primitives including zeroization on drop, memory locking, constant-time comparison, and compile-time guarded regions, with zero dependencies and no_std support.

Stars

131

7-day growth

No data

Forks

2

Open issues

0

License

Apache-2.0

Last updated

2026-07-22

AI repository intelligence
FR-AI / ANALYSIS

Why it is worth attention

It offers a comprehensive, safe, and dependency-free toolkit for protecting sensitive data in memory, combining multiple essential primitives (zeroization, mlock, constant-time, guarded regions) in one crate while remaining no_std compatible.

Who it is for

  • Rust developers handling cryptographic secrets or authentication tokens
  • Developers building security-sensitive applications (e.g., password managers, key stores)
  • Embedded systems developers working in no_std environments
  • Security auditors and maintainers who need minimal dependency audit surface

Use cases

  • Zeroizing cryptographic keys and secrets when they go out of scope to prevent memory leaks
  • Locking memory pages to prevent secrets from being swapped to disk
  • Performing timing‑side-channel‑resistant equality checks on MACs or tokens
  • Managing fixed‑size, locked memory regions for secure buffers in embedded or kernel‑adjacent code

Strengths

  • Zero dependencies – no transitive dependency surface to audit
  • no_std compatible – core primitives work without an allocator or standard library
  • Safe public API – all unsafe code is internal and encapsulated behind safe abstractions
  • Multiple essential primitives: zeroization, memory locking, constant‑time comparison, and compile‑time sized guarded regions

Considerations

  • Memory locking (mlock/VirtualLock) requires the `std` feature and is not available in no_std mode
  • Minimum supported Rust version is 1.65 and may be bumped in minor releases without warning
  • The crate is at version 0.1 and may lack production‑ready hardening or audit coverage

README quick start

Quick start

Description

Secure memory handling primitives for Rust — zeroization on drop, mlock-protected regions, constant-time comparison, and compile-time enforced memory safety boundaries

Related repositories

Similar projects matched by category, topics, and programming language.

slvDev
Featured
slvDev GitHub avatar

esp32-ai

A 28.9 million parameter language model runs on an $8 ESP32-S3 microcontroller entirely on-device, generating simple stories at about 9.5 tokens per second.

AI & Machine LearningLarge Language Models
1,960
l0ng-ai
Featured
l0ng-ai GitHub avatar

tty7

tty7 is a fast, GPU-accelerated terminal workbench with persistent sessions, built-in input tools, SSH support, and coding agent awareness.

Developer ToolsCLI & Terminal
359
inbjo
inbjo GitHub avatar

MirrorProxy

MirrorProxy is a self-hosted, Rust-based mirror proxy platform with an embedded React admin console and cross-platform client for managing package sources.

Rust
204