accounts/keystore: clear decrypted key after use#33090 (#1790)

This commit is contained in:
wit liu 2025-11-24 13:25:09 +08:00 committed by GitHub
parent 627d77ae24
commit ea179d287c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -417,6 +417,7 @@ func (ks *KeyStore) Export(a accounts.Account, passphrase, newPassphrase string)
if err != nil {
return nil, err
}
defer zeroKey(key.PrivateKey)
var N, P int
if store, ok := ks.storage.(*keyStorePassphrase); ok {
N, P = store.scryptN, store.scryptP
@ -476,6 +477,7 @@ func (ks *KeyStore) Update(a accounts.Account, passphrase, newPassphrase string)
if err != nil {
return err
}
defer zeroKey(key.PrivateKey)
return ks.storage.StoreKey(a.URL.Path, key, newPassphrase)
}