cmac: zeroize sensitive intermediate values

This commit is contained in:
Manuel Pégourié-Gonnard 2016-01-13 11:30:00 +00:00 committed by Simon Butcher
parent a610b4c04b
commit d6cf75474b

View file

@ -129,6 +129,8 @@ static int generate_subkeys( mbedtls_cmac_context *ctx )
multiply_by_u( ctx->K1, L );
multiply_by_u( ctx->K2, ctx->K1 );
mbedtls_zeroize( L, sizeof( L ) );
return( 0 );
}
@ -336,6 +338,9 @@ int mbedtls_aes_cmac_prf_128( mbedtls_cmac_context *ctx,
{
return( ret );
}
mbedtls_zeroize( int_key, sizeof( int_key ) );
return( mbedtls_cmac_generate( ctx, input, in_len, tag, 16 ) );
}