tree c3c426979555e4a2ec686f385456d0d9878b9cb6
parent 6ec13af413aca89c7bec07286a70c3baa9cfaeda
author Gilles Peskine <Gilles.Peskine@arm.com> 1639168401 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> 1639240667 +0100

Zeroize local MAC variables

Zeroize local MAC variables used for CBC+HMAC cipher suites. In encryption,
this is just good hygiene but probably not needed for security since the
data protected by the MAC that could leak is about to be transmitted anyway.
In DTLS decryption, this could be a security issue since an adversary could
learn the MAC of data that they were trying to inject. At least with
encrypt-then-MAC, the adversary could then easily inject a datagram with
a corrected packet. TLS would still be safe since the receiver would close
the connection after the bad MAC.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>