commit 28ea79152115b4b02543d1696d522830931b040c
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Wed Jan 13 11:30:00 2016 +0000
committer Simon Butcher <simon.butcher@arm.com> Thu Oct 13 13:51:08 2016 +0100
tree 2e5e64ce5c4b19e3e08bee477018cf3f59aa84a3
parent 756bcf763187b062c6754d216fdc4cef771e5dd0

cmac: zeroize sensitive intermediate values

library/cmac.c

diff --git a/library/cmac.c b/library/cmac.c
index 8f6574a..87846a6 100644
--- a/library/cmac.c
+++ b/library/cmac.c
@@ -129,6 +129,8 @@
     multiply_by_u( ctx->K1, L );
     multiply_by_u( ctx->K2, ctx->K1 );
 
+    mbedtls_zeroize( L, sizeof( L ) );
+
     return( 0 );
 }
 
@@ -336,6 +338,9 @@
     {
         return( ret );
     }
+
+    mbedtls_zeroize( int_key, sizeof( int_key ) );
+
     return( mbedtls_cmac_generate( ctx, input, in_len, tag, 16 ) );
 }