commit 2c5052647646ee52e525fd454c785db0d37fbbef
author Valerio Setti <valerio.setti@nordicsemi.no> Wed Apr 26 13:08:56 2023 +0200
committer Valerio Setti <valerio.setti@nordicsemi.no> Tue May 02 15:45:39 2023 +0200
tree cbeaec0c331331a871ef1da7c78595b88212392a
parent c8b786561232ad8bb97b2fdd3d02d7acec06eec1

pk: fix: clear buffer holding raw EC private key on exit

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>

library/pk.c

diff --git a/library/pk.c b/library/pk.c
index 2516eed..04c5e40 100644
--- a/library/pk.c
+++ b/library/pk.c
@@ -908,6 +908,8 @@
             return PSA_PK_TO_MBEDTLS_ERR(status);
         }
 
+        mbedtls_platform_zeroize(d, sizeof(d));
+
         /* make PK context wrap the key slot */
         mbedtls_pk_free(pk);
         mbedtls_pk_init(pk);