From f7127ca7294822f73e62d8312dd6d4b4252da828 Mon Sep 17 00:00:00 2001
From: jordan <jordan@wolfssl.com>
Date: Mon, 9 Mar 2026 09:33:34 -0500
Subject: [PATCH] ascon: don't skip wc_AsconAEAD128_Clear on auth error.

---
 wolfcrypt/src/ascon.c | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/wolfcrypt/src/ascon.c b/wolfcrypt/src/ascon.c
index f650bd685d..8c61f00bf0 100644
--- a/wolfcrypt/src/ascon.c
+++ b/wolfcrypt/src/ascon.c
@@ -491,6 +491,8 @@ int wc_AsconAEAD128_DecryptUpdate(wc_AsconAEAD128* a, byte* out,
 
 int wc_AsconAEAD128_DecryptFinal(wc_AsconAEAD128* a, const byte* tag)
 {
+    int ret = 0;
+
     if (a == NULL || tag == NULL)
         return BAD_FUNC_ARG;
     if (!a->keySet || !a->nonceSet || !a->adSet)
@@ -509,13 +511,14 @@ int wc_AsconAEAD128_DecryptFinal(wc_AsconAEAD128* a, const byte* tag)
     a->state.s64[4] ^= a->key[1];
 
     if (ConstantCompare(tag, (const byte*)&a->state.s64[3],
-                        ASCON_AEAD128_TAG_SZ) != 0)
-        return ASCON_AUTH_E;
+                        ASCON_AEAD128_TAG_SZ) != 0) {
+        ret = ASCON_AUTH_E;
+    }
 
     /* Clear state as soon as possible */
     wc_AsconAEAD128_Clear(a);
 
-    return 0;
+    return ret;
 }
 
 #endif /* HAVE_ASCON */