cmac: zeroize sensitive intermediate values
This commit is contained in:
parent
a610b4c04b
commit
d6cf75474b
1 changed files with 5 additions and 0 deletions
|
@ -129,6 +129,8 @@ static int generate_subkeys( mbedtls_cmac_context *ctx )
|
||||||
multiply_by_u( ctx->K1, L );
|
multiply_by_u( ctx->K1, L );
|
||||||
multiply_by_u( ctx->K2, ctx->K1 );
|
multiply_by_u( ctx->K2, ctx->K1 );
|
||||||
|
|
||||||
|
mbedtls_zeroize( L, sizeof( L ) );
|
||||||
|
|
||||||
return( 0 );
|
return( 0 );
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -336,6 +338,9 @@ int mbedtls_aes_cmac_prf_128( mbedtls_cmac_context *ctx,
|
||||||
{
|
{
|
||||||
return( ret );
|
return( ret );
|
||||||
}
|
}
|
||||||
|
|
||||||
|
mbedtls_zeroize( int_key, sizeof( int_key ) );
|
||||||
|
|
||||||
return( mbedtls_cmac_generate( ctx, input, in_len, tag, 16 ) );
|
return( mbedtls_cmac_generate( ctx, input, in_len, tag, 16 ) );
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue