HMAC_DRBG: clean stack buffers
Wipe stack buffers that may contain sensitive data (data that
contributes to the DRBG state.
diff --git a/library/hmac_drbg.c b/library/hmac_drbg.c
index dad55ff..65c8dac 100644
--- a/library/hmac_drbg.c
+++ b/library/hmac_drbg.c
@@ -89,6 +89,8 @@
mbedtls_md_hmac_update( &ctx->md_ctx, ctx->V, md_len );
mbedtls_md_hmac_finish( &ctx->md_ctx, ctx->V );
}
+
+ mbedtls_platform_zeroize( K, sizeof( K ) );
}
/*
@@ -154,6 +156,7 @@
ctx->reseed_counter = 1;
/* 4. Done */
+ mbedtls_platform_zeroize( seed, seedlen );
return( 0 );
}