commit 52fe517a77090aa3cf361285eb30053c0664871d
author Kusumit Ghoderao <Kusumit.Ghoderao@silabs.com> Wed May 24 12:28:46 2023 +0530
committer Kusumit Ghoderao <Kusumit.Ghoderao@silabs.com> Wed May 24 12:28:46 2023 +0530
tree 2a63c7499bf3b78d2c9ba9c6d673a8e90c343dad
parent 9016bc4ed26f54d08c5e22ec0f8514cdc93fe0f9

Change pbkdf2 password to array

Signed-off-by: Kusumit Ghoderao <Kusumit.Ghoderao@silabs.com>

include/psa/crypto_builtin_key_derivation.h

diff --git a/include/psa/crypto_builtin_key_derivation.h b/include/psa/crypto_builtin_key_derivation.h
index 5d01f6c..245f26a 100644
--- a/include/psa/crypto_builtin_key_derivation.h
+++ b/include/psa/crypto_builtin_key_derivation.h
@@ -119,7 +119,7 @@
     size_t MBEDTLS_PRIVATE(input_cost);
     uint8_t *MBEDTLS_PRIVATE(salt);
     size_t MBEDTLS_PRIVATE(salt_length);
-    uint8_t *MBEDTLS_PRIVATE(password);
+    uint8_t MBEDTLS_PRIVATE(password)[PSA_HMAC_MAX_HASH_BLOCK_SIZE];
     size_t MBEDTLS_PRIVATE(password_length);
 } psa_pbkdf2_key_derivation_t;
 #endif /* MBEDTLS_PSA_BUILTIN_ALG_PBKDF2_HMAC */

library/psa_crypto.c

diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index af4ab65..4615920 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -5101,11 +5101,6 @@
                                      operation->ctx.pbkdf2.salt_length);
             mbedtls_free(operation->ctx.pbkdf2.salt);
         }
-        if (operation->ctx.pbkdf2.password != NULL) {
-            mbedtls_platform_zeroize(operation->ctx.pbkdf2.password,
-                                     operation->ctx.pbkdf2.password_length);
-            mbedtls_free(operation->ctx.pbkdf2.password);
-        }
 
         status = PSA_SUCCESS;
     } else