commit 56453937a15d8de5e64a61158feb67cee87ee0b3
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Wed Feb 21 10:08:31 2018 +0100
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Tue Feb 27 12:39:12 2018 +0100
tree 5cb4b05062a4de4354e0423d9da3d65929133c6d
parent c76ceb677bfd86a73ccaa585c11b8f5122599d77

aria: use mbedtls_zeroize()

library/aria.c

diff --git a/library/aria.c b/library/aria.c
index 9b5febc..5a5222f 100644
--- a/library/aria.c
+++ b/library/aria.c
@@ -48,6 +48,11 @@
 
 #if !defined(MBEDTLS_ARIA_ALT)
 
+/* Implementation that should never be optimized out by the compiler */
+static void mbedtls_zeroize( void *v, size_t n ) {
+    volatile unsigned char *p = (unsigned char*)v; while( n-- ) *p++ = 0;
+}
+
 // 32-bit integer manipulation macros (little endian)
 
 #ifndef GET_UINT32_LE
@@ -489,8 +494,7 @@
     if( ctx == NULL )
         return;
 
-    // compiler can't remove this since this is not a static function
-    memset( ctx, 0, sizeof( mbedtls_aria_context ) );
+    mbedtls_zeroize( ctx, sizeof( mbedtls_aria_context ) );
 }
 
 #if defined(MBEDTLS_CIPHER_MODE_CBC)