Zeroize internal buffers and variables in MD hashes
Zeroising of local buffers and variables which are used for calculations in
mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
functions to erase sensitive data from memory.
Checked all function for possible missing zeroisation in MD.
Signed-off-by: gabor-mezei-arm <gabor.mezei@arm.com>
diff --git a/library/ripemd160.c b/library/ripemd160.c
index 0b6efcb..b991b56 100644
--- a/library/ripemd160.c
+++ b/library/ripemd160.c
@@ -328,6 +328,19 @@
ctx->state[4] = ctx->state[0] + B + Cp;
ctx->state[0] = C;
+ /* Zeroise variables to clear sensitive data from memory. */
+ mbedtls_platform_zeroize( &A, sizeof( A ) );
+ mbedtls_platform_zeroize( &B, sizeof( B ) );
+ mbedtls_platform_zeroize( &C, sizeof( C ) );
+ mbedtls_platform_zeroize( &D, sizeof( D ) );
+ mbedtls_platform_zeroize( &E, sizeof( E ) );
+ mbedtls_platform_zeroize( &Ap, sizeof( Ap ) );
+ mbedtls_platform_zeroize( &Bp, sizeof( Bp ) );
+ mbedtls_platform_zeroize( &Cp, sizeof( Cp ) );
+ mbedtls_platform_zeroize( &Dp, sizeof( Dp ) );
+ mbedtls_platform_zeroize( &Ep, sizeof( Ep ) );
+ mbedtls_platform_zeroize( &X, sizeof( X ) );
+
return( 0 );
}