@joe@f.duriansoftware.com @fay59@tech.lgbt Pretty much any attempt at wiping secrets fails unless it is part of task/process management (system/kernel), and even then it is still leaky (e.g swap, SRAM/DDR contents across reset, etc, etc), or can be snooped (spectre, SPA, DPA, etc). If leaking secrets is ever a concern where you'd want to apply sanitizing at *compiler* level, you're likely in a threat model where that isn't sufficient.