mbedtls/ChangeLog.d/zeroizations_of_sensitive_data_in_PKCS5_and_SHA.txt

6 lines
279 B
Plaintext
Raw Normal View History

Security
* Zeroising of local buffers and variables which are used for calculations
in mbedtls_pkcs5_pbkdf2_hmac() and mbedtls_internal_sha*_process()
functions to erase sensitive data from memory. Reported by
Johan Malmgren and Johan Uppman Bruce from Sectra.