76749aea78
Zeroising of local buffers and variables which are used for calculations in mbedtls_pkcs5_pbkdf2_hmac() and mbedtls_internal_sha*_process() functions to erase sensitive data from memory. Checked all function for possible missing zeroisation in PKCS and SHA. Signed-off-by: gabor-mezei-arm <gabor.mezei@arm.com>
5 lines
279 B
Text
5 lines
279 B
Text
Security
|
|
* Zeroising of local buffers and variables which are used for calculations
|
|
in mbedtls_pkcs5_pbkdf2_hmac() and mbedtls_internal_sha*_process()
|
|
functions to erase sensitive data from memory. Reported by
|
|
Johan Malmgren and Johan Uppman Bruce from Sectra.
|