e_aes_cbc_hmac_sha1.c: cleanse temporary copy of HMAC secret.
authorAndy Polyakov <appro@openssl.org>
Sun, 3 Feb 2013 19:04:39 +0000 (20:04 +0100)
committerAndy Polyakov <appro@openssl.org>
Sun, 3 Feb 2013 19:04:39 +0000 (20:04 +0100)
crypto/evp/e_aes_cbc_hmac_sha1.c

index 18fc921..b7aff44 100644 (file)
@@ -474,6 +474,8 @@ static int aesni_cbc_hmac_sha1_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void
                SHA1_Init(&key->tail);
                SHA1_Update(&key->tail,hmac_key,sizeof(hmac_key));
 
+               OPENSSL_cleanse(hmac_key,sizeof(hmac_key));
+
                return 1;
                }
        case EVP_CTRL_AEAD_TLS1_AAD: