]> git.codecow.com Git - Monocypher.git/commit
Fixed missing wipes
authorLoup Vaillant <loup@loup-vaillant.fr>
Sun, 15 Apr 2018 15:23:17 +0000 (17:23 +0200)
committerLoup Vaillant <loup@loup-vaillant.fr>
Sun, 15 Apr 2018 15:29:45 +0000 (17:29 +0200)
commitd3ee0f3fb51b43e99dd389f3068302e46b221887
tree89a12c045e67607570bfe13ee8e6e4eebe98356e
parent6e37a20de1fa1e3f9d9bea45029f7208d638619f
Fixed missing wipes

Found 4 internal buffers that were not properly wiped.  While this were
unlikely to turn into an exploitable vulnerability, we can never be too
cautious.

- XChacha20 initialisation failed to wipe its intermediate key.
- Blake2b initialisation failed to wipe a copy of its secret key.
- EdDSA failed to wipe an internal field element
- EdDSA failed to wipe an internal group element
src/monocypher.c