tree 8c92298484c458010c9541048bf63e57f4750d41
parent 9e8f3a6b71776a1f9647f6452e4b11d2573e02ae
author Gilles Peskine <Gilles.Peskine@arm.com> 1639168401 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> 1639229063 +0100

Zeroize local MAC variables

Zeroize local MAC variables used for CBC+HMAC cipher suites. In encryption,
this is just good hygiene but probably not needed for security since the
data protected by the MAC that could leak is about to be transmitted anyway.
In DTLS decryption, this could be a security issue since an adversary could
learn the MAC of data that they were trying to inject. At least with
encrypt-then-MAC, the adversary could then easily inject a datagram with
a corrected packet. TLS would still be safe since the receiver would close
the connection after the bad MAC.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>