commit 03faf5d2c174eef1ebab39a8139a4042e77049b8
author Przemek Stekiel <przemyslaw.stekiel@mobica.com> Wed Apr 20 08:37:43 2022 +0200
committer Przemek Stekiel <przemyslaw.stekiel@mobica.com> Thu Apr 21 11:53:57 2022 +0200
tree d125bb541ee5a34bfa4c71558478da360318b6c8
parent 937b90febfc3d54373fe2aa2e0265c135cb37ca7

psa_tls12_prf_psk_to_ms_set_key: clear buffers after usage

Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>

library/psa_crypto.c

diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index 1cb00c8..c2d8b16 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -5313,6 +5313,7 @@
         if ( prf->other_secret_length != 0 )
         {
             memcpy( cur, prf->other_secret, prf->other_secret_length );
+            mbedtls_platform_zeroize( prf->other_secret, prf->other_secret_length );
             cur += prf->other_secret_length;
         }
     }
@@ -5327,6 +5328,7 @@
     *cur++ = MBEDTLS_BYTE_1( data_length );
     *cur++ = MBEDTLS_BYTE_0( data_length );
     memcpy( cur, data, data_length );
+    mbedtls_platform_zeroize( (void*) data, data_length );
     cur += data_length;
 
     status = psa_tls12_prf_set_key( prf, pms, cur - pms );