Ensure HMAC key gets cleansed after use
authorMatt Caswell <matt@openssl.org>
Fri, 24 Jun 2016 09:31:08 +0000 (10:31 +0100)
committerMatt Caswell <matt@openssl.org>
Fri, 24 Jun 2016 12:25:00 +0000 (13:25 +0100)
commit0def528bc502a888a3f4ef3c38ea4c5e69fd7375
tree4f37494b46ad745de9db8c19d104291187cf7266
parent827d17f0210e6721be9834220be1e31b75b0b272
Ensure HMAC key gets cleansed after use

aesni_cbc_hmac_sha256_ctrl() and aesni_cbc_hmac_sha1_ctrl() cleanse the
HMAC key after use, but static int rc4_hmac_md5_ctrl() doesn't.

Fixes an OCAP Audit issue.

Reviewed-by: Andy Polyakov <appro@openssl.org>
crypto/evp/e_rc4_hmac_md5.c