generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

e_aes_cbc_hmac_sha1.c: cleanse temporary copy of HMAC secret.

Browse Source 
(cherry picked from commit 529d27ea472fc2c7ba9190a15a58cb84012d4ec6)
This commit is contained in:
Andy Polyakov 2013-02-03 20:04:39 +01:00 committed by Dr. Stephen Henson
parent 5966f4d973
commit af010edd55
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
crypto/evp/e_aes_cbc_hmac_sha1.c
View File

@ -474,6 +474,8 @@ static int aesni_cbc_hmac_sha1_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void
SHA1_Init(&key->tail); SHA1_Init(&key->tail);
SHA1_Update(&key->tail,hmac_key,sizeof(hmac_key)); SHA1_Update(&key->tail,hmac_key,sizeof(hmac_key));
OPENSSL_cleanse(hmac_key,sizeof(hmac_key));
return 1; return 1;
} }
case EVP_CTRL_AEAD_TLS1_AAD: case EVP_CTRL_AEAD_TLS1_AAD: