zeroize-audit

To verify if compiler optimizations remove sensitive data zeroization, compare IR and assembly outputs against source code. This skill performs that comparison to detect eliminated zeroization in C, C++, and Rust projects.

Compilers optimize away memory zeroization for cryptographic keys because dead store elimination removes writes to buffers before they are freed. This skill detects such removal by analyzing assembly-level evidence and IR comparisons.

To audit source code for missing zeroization of passwords and secrets, scan the project for insecure cleanup practices. This skill verifies that secrets, keys, and passwords are properly erased during cleanup across C, C++, and Rust codebases.

Yes, this zeroization audit works with Python and Clang dependencies, requiring LLVM and Clang to analyze IR and assembly. It uses these components to perform comprehensive security auditing of source code for correct sensitive data handling.

The best way to verify secure coding compliance for sensitive data erasure is to perform a comprehensive audit checking for proper zeroization. This skill ensures data confidentiality by confirming secrets are securely wiped before memory is freed across software projects.