wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 10:40:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

pwdbased: add missing ForceZero for blocks, v, y.

Browse Source
This commit is contained in:
jordan
2026-03-05 13:09:26 -06:00
parent 36328e31a5
commit 3e39a5c11e
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfcrypt/src/pwdbased.c
+10
View File
@@ -830,6 +830,16 @@ int wc_scrypt(byte* output, const byte* passwd, int passLen,
ret = wc_PBKDF2(output, passwd, passLen, blocks, (int)blocksSz, 1, dkLen,
WC_SHA256);
end:
if (blocks != NULL) {
ForceZero(blocks, blocksSz);
}
if (v != NULL) {
ForceZero(v, ((size_t)1 << cost) * (size_t)bSz);
}
if (y != NULL) {
ForceZero(y, (size_t)(blockSize * 128));
}
XFREE(blocks, NULL, DYNAMIC_TYPE_TMP_BUFFER);
XFREE(v, NULL, DYNAMIC_TYPE_TMP_BUFFER);
XFREE(y, NULL, DYNAMIC_TYPE_TMP_BUFFER);