wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 10:40:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

hpke: add missing ForceZero for eae_prk, key_schedule_context, secret.

Browse Source
This commit is contained in:
jordan
2026-03-05 15:30:39 -06:00
parent 36328e31a5
commit 1d3a0ca53a
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfcrypt/src/hpke.c
+5 -1
View File
@@ -599,12 +599,14 @@ static int wc_HpkeExtractAndExpand( Hpke* hpke, byte* dh, word32 dh_len,
EAE_PRK_LABEL_STR_LEN, dh, dh_len, eae_prk);
/* expand */
if ( ret == 0 )
if ( ret == 0 ) {
ret = wc_HpkeLabeledExpand(hpke, hpke->kem_suite_id,
sizeof( hpke->kem_suite_id ), eae_prk, hpke->Nh,
(byte*)SHARED_SECRET_LABEL_STR, SHARED_SECRET_LABEL_STR_LEN,
kemContext, kem_context_length, hpke->Nsecret, sharedSecret);
}
ForceZero(eae_prk, WC_MAX_DIGEST_SIZE);
WC_FREE_VAR_EX(eae_prk, hpke->heap, DYNAMIC_TYPE_DIGEST);
return ret;
@@ -693,6 +695,8 @@ static int wc_HpkeKeyScheduleBase(Hpke* hpke, HpkeBaseContext* context,
1 + 2 * hpke->Nh, hpke->Nh, context->exporter_secret);
}
ForceZero(key_schedule_context, 1 + 2 * WC_MAX_DIGEST_SIZE);
ForceZero(secret, WC_MAX_DIGEST_SIZE);
WC_FREE_VAR_EX(key_schedule_context, hpke->heap,
DYNAMIC_TYPE_TMP_BUFFER);
WC_FREE_VAR_EX(secret, hpke->heap, DYNAMIC_TYPE_DIGEST);