mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-11-26 10:15:38 +01:00
Safely erase key material upon abort
Some key derivation operation contexts (like psa_tls12_prf_key_derivation_t) directly contain buffers with parts of the derived key. Erase them safely as part of the abort.
This commit is contained in:
parent
71a4c9125b
commit
083036af64
@ -3902,7 +3902,7 @@ psa_status_t psa_key_derivation_abort( psa_key_derivation_operation_t *operation
|
||||
{
|
||||
status = PSA_ERROR_BAD_STATE;
|
||||
}
|
||||
memset( operation, 0, sizeof( *operation ) );
|
||||
mbedtls_platform_zeroize( operation, sizeof( *operation ) );
|
||||
return( status );
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user