wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-08-17 09:01:36 +02:00
Code Issues Packages Projects Releases Wiki Activity

Release Ed448 sign MemZero registrations on the crypto callback exit

Browse Source
This commit is contained in:
night1rider
2026-08-08 15:14:27 -06:00
parent 4d19228ca0
commit 33e03a5ce4
1 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfcrypt/src/ed448.c
+12 -1
View File
@@ -478,8 +478,19 @@ int wc_ed448_sign_msg_ex(const byte* in, word32 inLen, byte* out,
{
ret = wc_CryptoCb_Ed448Sign(in, inLen, out, outLen, key, type,
context, contextLen);
if (ret != WC_NO_ERR_TRACE(CRYPTOCB_UNAVAILABLE))
if (ret != WC_NO_ERR_TRACE(CRYPTOCB_UNAVAILABLE)) {
#ifdef WOLFSSL_CHECK_MEM_ZERO
/* The device signed, so this returns without reaching the
* ForceZero below. Release the registrations made above or
* they outlive the stack frame and trip a later check. */
#ifdef WOLFSSL_EDDSA_CHECK_PRIV_ON_SIGN
wc_MemZero_Check(orig_k, sizeof(orig_k));
#endif
wc_MemZero_Check(nonce, sizeof(nonce));
wc_MemZero_Check(az, sizeof(az));
#endif
return ret;
}
ret = 0; /* fall-through when unavailable */
}
}