commit c52220d775aba3a30a1a64035aacb448cb6e58d3
author Mateusz Starzyk <mateusz.starzyk@mobica.com> Tue Jul 27 13:54:55 2021 +0200
committer Mateusz Starzyk <mateusz.starzyk@mobica.com> Tue Aug 10 13:56:37 2021 +0200
tree 716000d5c12eaad21116f5ea6e4ed06b4568c360
parent a9cbdfbb349a3bed44ad7241472e938e944278f5

Clear temporary buffer after block crypt operation.

Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>

library/ccm.c

diff --git a/library/ccm.c b/library/ccm.c
index be1671c..425872d 100644
--- a/library/ccm.c
+++ b/library/ccm.c
@@ -127,13 +127,15 @@
     if( ( ret = mbedtls_cipher_update( &ctx->cipher_ctx, ctx->ctr, 16, tmp_buf,
                                        &olen ) ) != 0 )
     {
-        ctx->state |= CCM_STATE__ERROR;                                    \
+        ctx->state |= CCM_STATE__ERROR;           
+        mbedtls_platform_zeroize(tmp_buf, sizeof(tmp_buf));
         return ret;
     }
 
     for( i = 0; i < use_len; i++ )
         output[i] = input[i] ^ tmp_buf[offset + i];
 
+    mbedtls_platform_zeroize(tmp_buf, sizeof(tmp_buf));
     return ret;
 }