wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-10 21:00:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

Zero out the aead in wc_ChaCha20Poly1305_Encrypt/Decrypt before freeing it.

Browse Source 
Fixes F-4023.
This commit is contained in:
Kareem
2026-06-12 12:21:02 -07:00
parent c677768375
commit 511f6e1bf0
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfcrypt/src/chacha20_poly1305.c
+2
View File
@@ -75,6 +75,7 @@ int wc_ChaCha20Poly1305_Encrypt(
if (ret == 0)
ret = wc_ChaCha20Poly1305_Final(aead, outAuthTag);
ForceZero(aead, sizeof(ChaChaPoly_Aead));
WC_FREE_VAR_EX(aead, NULL, DYNAMIC_TYPE_TMP_BUFFER);
return ret;
@@ -123,6 +124,7 @@ int wc_ChaCha20Poly1305_Decrypt(
/* zero plaintext on error */
ForceZero(outPlaintext, inCiphertextLen);
}
ForceZero(aead, sizeof(ChaChaPoly_Aead));
WC_FREE_VAR_EX(aead, NULL, DYNAMIC_TYPE_TMP_BUFFER);
return ret;