| Gilles Peskine | 957e383 | 2021-12-10 21:33:21 +0100 | [diff] [blame] | 1 | Security |
| 2 | * Zeroize intermediate variables used to calculate the MAC in CBC cipher | ||||
| 3 | suites. This hardens the library in case stack memory leaks through a | ||||
| 4 | memory disclosure vulnerabilty, which could formerly have allowed a | ||||
| 5 | man-in-the-middle to inject fake ciphertext into a DTLS connection. | ||||