commit 06b6b8c8d6752d4da7d58f80cb52c41e2f2a30a5
author Paul Elliott <paul.elliott@arm.com> Mon Sep 13 19:02:04 2021 +0100
committer Paul Elliott <paul.elliott@arm.com> Sun Sep 19 18:43:16 2021 +0100
tree 7c11f80251c889cd1325ea8cc36728b99c7d078e
parent 719c1324a124dcb7f6744f206e2c930020032629

Add missing zeroize for sensitive tag data.

Signed-off-by: Paul Elliott <paul.elliott@arm.com>

library/psa_crypto_driver_wrappers.c

diff --git a/library/psa_crypto_driver_wrappers.c b/library/psa_crypto_driver_wrappers.c
index 1dd3b2d..5e7eb11 100644
--- a/library/psa_crypto_driver_wrappers.c
+++ b/library/psa_crypto_driver_wrappers.c
@@ -1760,6 +1760,8 @@
                         status = PSA_ERROR_INVALID_SIGNATURE;
                 }
 
+                mbedtls_platform_zeroize( check_tag, sizeof( check_tag ) );
+
                 return( status );
             }