feat: support zeroize codegen

Cargo.toml

@@ -24,13 +24,15 @@ subtle = { version = "2.2.1", default-features = false, features = ["i128"] }
 [dev-dependencies]
 blake2b_simd = "1"
 rand = "0.9"
+zeroize = { version = "1", default-features = false }
 
 [features]
 default = ["bits", "std"]
 alloc = []
 bits = ["bitvec", "ff_derive?/bits"]
 derive = ["byteorder", "ff_derive"]
 std = ["alloc"]
+test_derive_zeroize = ["derive", "ff_derive/zeroize"]
 
 [[test]]
 name = "derive"

ff_derive/Cargo.toml

@@ -17,6 +17,8 @@ repository = "https://github.com/zkcrypto/ff"
 # enabled when generating bitvec code utilizing the version of ff's bitvec
 # ff/bits enables this
 bits = []
+# enabled when generating zeroize bindings
+zeroize = []
 
 [lib]
 proc-macro = true

ff_derive/src/lib.rs

@@ -332,6 +332,14 @@ fn prime_field_repr_impl(
 ) -> proc_macro2::TokenStream {
     let repr_iter_be = endianness.iter_be();
 
+    let prime_field_repr_zeroize_impl = if cfg!(feature = "zeroize") {
+        Some(quote! {
+            impl ::zeroize::DefaultIsZeroes for #repr {}
+        })
+    } else {
+        None
+    };
+
     quote! {
         #[derive(Copy, Clone)]
         pub struct #repr(pub [u8; #bytes]);
@@ -386,6 +394,8 @@ fn prime_field_repr_impl(
                 &mut self.0
             }
         }
+
+        #prime_field_repr_zeroize_impl
     }
 }
 
@@ -934,6 +944,14 @@ fn prime_field_impl(
         None
     };
 
+    let prime_field_zeroize_impl = if cfg!(feature = "zeroize") {
+        Some(quote! {
+            impl ::zeroize::DefaultIsZeroes for #name {}
+        })
+    } else {
+        None
+    };
+
     let top_limb_index = limbs - 1;
 
     quote! {
@@ -1253,6 +1271,7 @@ fn prime_field_impl(
         }
 
         #prime_field_bits_impl
+        #prime_field_zeroize_impl
 
         impl ::ff::Field for #name {
             const ZERO: Self = #name([0; #limbs]);

tests/derive.rs

@@ -155,3 +155,20 @@ fn sqrt() {
     test(Fp::ONE);
     test(Fp::random(&mut rand::rng()));
 }
+
+#[cfg(feature = "test_derive_zeroize")]
+#[test]
+fn zeroize() {
+    use ff::{Field, PrimeField};
+    use rand::{rngs::OsRng, TryRngCore};
+    use zeroize::Zeroize;
+
+    let mut f = Bls381K12Scalar::random(&mut OsRng.unwrap_err());
+    let mut r = f.to_repr();
+
+    f.zeroize();
+    assert_eq!(f, Bls381K12Scalar::ZERO);
+
+    r.zeroize();
+    assert_eq!(r, Default::default());
+}