d1c98fcf5e
Zeroising of local buffers and variables which are used for calculations in mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process() functions to erase sensitive data from memory. Checked all function for possible missing zeroisation in MD. Signed-off-by: gabor-mezei-arm <gabor.mezei@arm.com>
6 lines
354 B
Text
6 lines
354 B
Text
Security
|
|
* Zeroising of local buffers and variables which are used for calculations
|
|
in mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
|
|
mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
|
|
functions to erase sensitive data from memory. Reported by
|
|
Johan Malmgren and Johan Uppman Bruce from Sectra.
|