ciper/blake2: Make sure to clean up the stack.

* cipher/blake2.c (blake2b_vl_hash): Wipe the memory.

--

Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

1 files changed, 2 insertions, 0 deletions

diff --git a/cipher/blake2.c b/cipher/blake2.c
index dc70eb48..a5926b95 100644
--- a/cipher/blake2.c
+++ b/cipher/blake2.c
@@ -522,6 +522,8 @@ blake2b_vl_hash (const void *in, size_t inlen, size_t outputlen, void *output)
         memcpy ((unsigned char *)output+r*32, d+32, remained);
     }
 
+  wipememory (buf, sizeof (buf));
+  wipememory (&ctx, sizeof (ctx));
   return 0;
 }