diff options
| author | Andy Polyakov <appro@openssl.org> | 2013-02-03 20:04:39 +0100 |
|---|---|---|
| committer | Andy Polyakov <appro@openssl.org> | 2013-02-03 20:04:39 +0100 |
| commit | 529d27ea472fc2c7ba9190a15a58cb84012d4ec6 (patch) | |
| tree | 56d94517ddb968422843766846a4c7a754fc5927 | |
| parent | b2226c6c8371bf69bb0fcb59cb7bb8562a548fba (diff) | |
| download | openssl-new-529d27ea472fc2c7ba9190a15a58cb84012d4ec6.tar.gz | |
e_aes_cbc_hmac_sha1.c: cleanse temporary copy of HMAC secret.
| -rw-r--r-- | crypto/evp/e_aes_cbc_hmac_sha1.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/crypto/evp/e_aes_cbc_hmac_sha1.c b/crypto/evp/e_aes_cbc_hmac_sha1.c index 18fc921010..b7aff44d28 100644 --- a/crypto/evp/e_aes_cbc_hmac_sha1.c +++ b/crypto/evp/e_aes_cbc_hmac_sha1.c @@ -474,6 +474,8 @@ static int aesni_cbc_hmac_sha1_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void SHA1_Init(&key->tail); SHA1_Update(&key->tail,hmac_key,sizeof(hmac_key)); + OPENSSL_cleanse(hmac_key,sizeof(hmac_key)); + return 1; } case EVP_CTRL_AEAD_TLS1_AAD: |