Clear seed buffer after dilithium key generation

julek-wolfssl · dgarske · commit 643427040bb4 · 2026-03-16T15:15:11.000-07:00
F-767
diff --git a/wolfcrypt/src/dilithium.c b/wolfcrypt/src/dilithium.c
@@ -8026,6 +8026,7 @@ static int dilithium_make_key(dilithium_key* key, WC_RNG* rng)
         ret = wc_dilithium_make_key_from_seed(key, seed);
     }
 
+    ForceZero(seed, sizeof(seed));
     return ret;
 }
 #endif /* !WOLFSSL_DILITHIUM_NO_MAKE_KEY */

Original file line number	Diff line number	Diff line change
`@@ -8026,6 +8026,7 @@ static int dilithium_make_key(dilithium_key* key, WC_RNG* rng)`
`8026`	`8026`	`ret = wc_dilithium_make_key_from_seed(key, seed);`
`8027`	`8027`	`}`
`8028`	`8028`
	`8029`	`+ ForceZero(seed, sizeof(seed));`
`8029`	`8030`	`return ret;`
`8030`	`8031`	`}`
`8031`	`8032`	`#endif /* !WOLFSSL_DILITHIUM_NO_MAKE_KEY */`