From 41108878713f98cfeefeb4748d6c28038ea538ea Mon Sep 17 00:00:00 2001
From: Daniel Pouzzner <douzzer@wolfssl.com>
Date: Fri, 27 Feb 2026 23:40:19 -0600
Subject: [PATCH] wolfcrypt/src/aes.c: in AesSivCipher(), burn sivTmp before
 return (Fenrir M-69).

---
 wolfcrypt/src/aes.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/wolfcrypt/src/aes.c b/wolfcrypt/src/aes.c
index 0713c49bc1..ca8e47c703 100644
--- a/wolfcrypt/src/aes.c
+++ b/wolfcrypt/src/aes.c
@@ -16531,6 +16531,8 @@ static WARN_UNUSED_RESULT int AesSivCipher(
     wc_AesFree(aes);
 #endif
 
+    ForceZero(sivTmp, sizeof(sivTmp));
+
     return ret;
 }