From 563fcafd0064dfd20bfa40f4da29461a3e18573e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sosth=C3=A8ne=20Gu=C3=A9don?= <sosthene@nitrokey.com>
Date: Fri, 27 Sep 2024 10:36:11 +0200
Subject: [PATCH] Properly clear rather than delete keys

---
 src/lib.rs   | 2 +-
 src/state.rs | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/lib.rs b/src/lib.rs
index 9e1695a..aa58871 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -920,7 +920,7 @@ impl<'a, T: Client> LoadedAuthenticator<'a, T> {
         };
         syscall!(self.trussed.delete(public_key));
         if reference.is_encrypted() {
-            syscall!(self.trussed.delete(secret_key));
+            syscall!(self.trussed.clear(secret_key));
         }
 
         Ok(())
diff --git a/src/state.rs b/src/state.rs
index 4226a02..7885d2d 100644
--- a/src/state.rs
+++ b/src/state.rs
@@ -239,7 +239,7 @@ impl Keys {
         };
 
         if let Some(key_id) = user_public_key {
-            syscall!(client.delete(key_id));
+            syscall!(client.clear(key_id));
         }
         old
     }
@@ -456,7 +456,7 @@ impl Volatile {
 
     pub fn clear_pin_verified(&mut self, client: &mut impl crate::Client) {
         if let Some(key) = self.app_security_status.pin_verified {
-            syscall!(client.delete(key));
+            syscall!(client.clear(key));
         }
         self.app_security_status.pin_verified = None;
         self.app_security_status.pin_just_verified = false;
@@ -1195,7 +1195,7 @@ impl ContainerStorage {
             Status::UnspecifiedNonpersistentExecutionError
         })?;
 
-        syscall!(client.delete(key_to_seal));
+        syscall!(client.clear(key_to_seal));
         Ok(())
     }
 }