commit 4a2fa5d0aaa99ce906bcaee76deeb67273b4b691
author Jerry Yu <jerry.h.yu@arm.com> Fri Dec 10 10:19:34 2021 +0800
committer Jerry Yu <jerry.h.yu@arm.com> Fri Dec 10 10:37:14 2021 +0800
tree bd3640aeafc082ae2ec6a0fa9d93fea4f454cce9
parent 27224f58be7df8430f4826d6a4f8a4541dfdcc61

Move erase handshake secrets

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>

library/ssl_tls13_generic.c

diff --git a/library/ssl_tls13_generic.c b/library/ssl_tls13_generic.c
index d15296f..4543d74 100644
--- a/library/ssl_tls13_generic.c
+++ b/library/ssl_tls13_generic.c
@@ -1060,11 +1060,7 @@
                     sizeof( ssl->handshake->state_local.finished_out.digest ),
                     &ssl->handshake->state_local.finished_out.digest_len,
                     ssl->conf->endpoint );
-    if( ssl->conf->endpoint == MBEDTLS_SSL_IS_CLIENT )
-    {
-        mbedtls_platform_zeroize( &ssl->handshake->tls13_hs_secrets,
-                                  sizeof( ssl->handshake->tls13_hs_secrets ) );
-    }
+
     if( ret != 0 )
     {
         MBEDTLS_SSL_DEBUG_RET( 1, "calculate_verify_data failed", ret );