commit 901c9b731f5a1cae3f1802d09e2525ee0d0913fc
author Steven Cooreman <steven.cooreman@silabs.com> Fri Feb 25 11:14:59 2022 +0100
committer Steven Cooreman <steven.cooreman@silabs.com> Fri Mar 04 10:35:19 2022 +0100
tree 2a3cc3d6cb3b71166c5c7e29506478353bab2f74
parent 23ea2c6c00e47a135797cb5e379a6ea08e8fbfc2

Erase secrets in allocated memory before freeing said memory

Signed-off-by: Steven Cooreman <steven.cooreman@silabs.com>

library/psa_crypto_storage.c

diff --git a/library/psa_crypto_storage.c b/library/psa_crypto_storage.c
index b485c50..6c8321f 100644
--- a/library/psa_crypto_storage.c
+++ b/library/psa_crypto_storage.c
@@ -347,6 +347,7 @@
     status = psa_crypto_storage_store( attr->id,
                                        storage_data, storage_data_length );
 
+    mbedtls_platform_zeroize( storage_data, storage_data_length );
     mbedtls_free( storage_data );
 
     return( status );
@@ -392,6 +393,7 @@
         status = PSA_ERROR_STORAGE_FAILURE;
 
 exit:
+    mbedtls_platform_zeroize( loaded_data, storage_data_length );
     mbedtls_free( loaded_data );
     return( status );
 }