diff options
| -rw-r--r-- | security/nss/lib/softoken/pkcs11c.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/security/nss/lib/softoken/pkcs11c.c b/security/nss/lib/softoken/pkcs11c.c index 9b094a304..8847c2f79 100644 --- a/security/nss/lib/softoken/pkcs11c.c +++ b/security/nss/lib/softoken/pkcs11c.c @@ -6072,6 +6072,7 @@ hkdf: { crv = CKR_FUNCTION_FAILED; break; } + hashLen = rawHash->length; if (pMechanism->ulParameterLen != sizeof(CK_NSS_HKDFParams) || !params || (!params->bExpand && !params->bExtract) || @@ -6086,6 +6087,9 @@ hkdf: { crv = CKR_TEMPLATE_INCONSISTENT; break; } + crv = sftk_DeriveSensitiveCheck(sourceKey, key); + if (crv != CKR_OK) + break; /* HKDF-Extract(salt, base key value) */ if (params->bExtract) { |