PPAP integration

2026-07-31 01:40:42 +00:00 · 2026-07-16 19:36:30 +03:00
parent ba64a0c95a
commit 4cd9f928ff
36 changed files with 6586 additions and 656 deletions
@@ -26,7 +26,17 @@ namespace Esiur.Security.Authority
            LocalIdentity = localIdentity;
            RemoteIdentity = remoteIdentity;
            AuthenticationData = authenticationData;
-            SessionKey = sessionKey;
+            // AuthenticationResult owns its key buffer. This lets transports erase the
+            // short-lived handoff copy after adopting their own session key without
+            // mutating provider-wide or cached key material.
+            SessionKey = sessionKey == null ? null : (byte[])sessionKey.Clone();
+        }
+
+        internal void ClearSessionKey()
+        {
+            if (SessionKey != null)
+                Array.Clear(SessionKey, 0, SessionKey.Length);
+            SessionKey = null;
        }
    }
 }