Zero the temporary HMAC key in hmac_init_pad().

Reviewed by: delphij Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D25436
2020-06-25 20:18:55 +00:00 · 2020-06-25 20:18:55 +00:00 · 17a831ea25
commit 17a831ea25
parent 4a711b8d04
1 changed files with 1 additions and 0 deletions
--- a/sys/opencrypto/crypto.c
+++ b/sys/opencrypto/crypto.c
@ -444,6 +444,7 @@ hmac_init_pad(struct auth_hash *axf, const char *key, int klen, void *auth_ctx,

 	axf->Init(auth_ctx);
 	axf->Update(auth_ctx, hmac_key, axf->blocksize);
+	explicit_bzero(hmac_key, sizeof(hmac_key));
 }

 void