Zeroize on Wallet struct (#4624)

Co-authored-by: sydhds <[email protected]>

Cargo.toml

@@ -200,3 +200,4 @@ tracing-subscriber = "0.3"
 unsigned-varint = "0.8"
 variant_count = "1.1"
 walkdir = "2.3"
+zeroize = { version = "1.7", features = ["derive"] }

massa-wallet/Cargo.toml

@@ -19,3 +19,4 @@ massa_hash = {workspace = true}
 massa_models = {workspace = true}
 massa_signature = {workspace = true}
 serde_yaml = {workspace = true}
+zeroize = { worksapce = true }

massa-wallet/src/lib.rs

@@ -19,17 +19,20 @@ use std::collections::hash_map::Entry;
 use std::collections::HashSet;
 use std::path::PathBuf;
 use std::str::FromStr;
+use zeroize::{Zeroize, ZeroizeOnDrop};
 
 mod error;
 
 const WALLET_VERSION: u64 = 1;
 
 /// Contains the keypairs created in the wallet.
-#[derive(Clone, Debug, Deserialize, Serialize)]
+#[derive(Clone, Debug, Deserialize, Serialize, Zeroize, ZeroizeOnDrop)]
 pub struct Wallet {
     /// Keypairs and addresses
+    #[zeroize(skip)]
     pub keys: PreHashMap<Address, KeyPair>,
     /// Path to the file containing the keypairs (encrypted)
+    #[zeroize(skip)]
     wallet_path: PathBuf,
     /// Password
     password: String,