diff options
| author | Ben Lindstrom <mouring@eviladmin.org> | 2001-10-03 17:18:37 +0000 |
|---|---|---|
| committer | Ben Lindstrom <mouring@eviladmin.org> | 2001-10-03 17:18:37 +0000 |
| commit | 1af4d3bb709453b0b206106adaba7c94548fa6f2 (patch) | |
| tree | 1c49e155e7d893d117d39e430fc6558a1dfd12b1 /ssh-keygen.c | |
| parent | 6149a6c57fe24a4afc4a11be7f2061d4d079966a (diff) | |
| download | openssh-git-1af4d3bb709453b0b206106adaba7c94548fa6f2.tar.gz | |
- djm@cvs.openbsd.org 2001/09/28 12:07:09
[ssh-keygen.c]
bzero private key after loading to smartcard; ok markus@
Diffstat (limited to 'ssh-keygen.c')
| -rw-r--r-- | ssh-keygen.c | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/ssh-keygen.c b/ssh-keygen.c index 299ba79c..727b876d 100644 --- a/ssh-keygen.c +++ b/ssh-keygen.c @@ -12,7 +12,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: ssh-keygen.c,v 1.81 2001/09/17 20:50:22 markus Exp $"); +RCSID("$OpenBSD: ssh-keygen.c,v 1.82 2001/09/28 12:07:09 djm Exp $"); #include <openssl/evp.h> #include <openssl/pem.h> @@ -495,6 +495,14 @@ do_upload(struct passwd *pw, const char *sc_reader_id) status = 0; log("loading key done"); done: + + memset(elements[0], '\0', BN_num_bytes(prv->rsa->q)); + memset(elements[1], '\0', BN_num_bytes(prv->rsa->p)); + memset(elements[2], '\0', BN_num_bytes(prv->rsa->iqmp)); + memset(elements[3], '\0', BN_num_bytes(prv->rsa->dmq1)); + memset(elements[4], '\0', BN_num_bytes(prv->rsa->dmp1)); + memset(elements[5], '\0', BN_num_bytes(prv->rsa->n)); + if (prv) key_free(prv); for (i = 0; i < NUM_RSA_KEY_ELEMENTS; i++) |