forked from wolfSSL/wolfssl
Force to zero the buffer used to generate the DH private key.
This commit is contained in:
@@ -1081,6 +1081,7 @@ static int GeneratePrivateDh186(DhKey* key, WC_RNG* rng, byte* priv,
|
|||||||
}
|
}
|
||||||
} while (mp_cmp_d(&tmpX, 1) != MP_GT);
|
} while (mp_cmp_d(&tmpX, 1) != MP_GT);
|
||||||
|
|
||||||
|
ForceZero(cBuf, cSz);
|
||||||
XFREE(cBuf, key->heap, DYNAMIC_TYPE_TMP_BUFFER);
|
XFREE(cBuf, key->heap, DYNAMIC_TYPE_TMP_BUFFER);
|
||||||
|
|
||||||
/* tmpQ = q - 1 */
|
/* tmpQ = q - 1 */
|
||||||
@@ -1110,6 +1111,7 @@ static int GeneratePrivateDh186(DhKey* key, WC_RNG* rng, byte* priv,
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
mp_forcezero(&tmpX);
|
||||||
mp_clear(&tmpX);
|
mp_clear(&tmpX);
|
||||||
mp_clear(&tmpQ);
|
mp_clear(&tmpQ);
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user