Zeroize internal buffers and variables in PKCS and SHA
Zeroising of local buffers and variables which are used for calculations in
mbedtls_pkcs5_pbkdf2_hmac() and mbedtls_internal_sha*_process() functions
to erase sensitive data from memory.
Checked all function for possible missing zeroisation in PKCS and SHA.
Signed-off-by: gabor-mezei-arm <gabor.mezei@arm.com>
diff --git a/library/sha512.c b/library/sha512.c
index 0a42f55..9e9f073 100644
--- a/library/sha512.c
+++ b/library/sha512.c
@@ -300,6 +300,19 @@
ctx->state[6] += G;
ctx->state[7] += H;
+ /* Zeroise buffers and variables to clear sensitive data from memory. */
+ mbedtls_zeroize( &A, sizeof( A ) );
+ mbedtls_zeroize( &B, sizeof( B ) );
+ mbedtls_zeroize( &C, sizeof( C ) );
+ mbedtls_zeroize( &D, sizeof( D ) );
+ mbedtls_zeroize( &E, sizeof( E ) );
+ mbedtls_zeroize( &F, sizeof( F ) );
+ mbedtls_zeroize( &G, sizeof( G ) );
+ mbedtls_zeroize( &H, sizeof( H ) );
+ mbedtls_zeroize( &W, sizeof( W ) );
+ mbedtls_zeroize( &temp1, sizeof( temp1 ) );
+ mbedtls_zeroize( &temp2, sizeof( temp2 ) );
+
return( 0 );
}