Skip to content

Commit b71c2a2

Browse files
committed
zero ECC private key stack buffers
1 parent a5ae5f1 commit b71c2a2

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

wolfcrypt/src/port/kcapi/kcapi_ecc.c

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -120,6 +120,7 @@ int KcapiEcc_LoadKey(ecc_key* key, byte* pubkey_raw, word32* pubkey_sz,
120120
if (ret == 0) {
121121
ret = kcapi_kpp_setkey(key->handle, priv, keySz);
122122
}
123+
ForceZero(priv, sizeof(priv));
123124
}
124125
else {
125126
/* generate new ephemeral key */
@@ -241,6 +242,7 @@ int KcapiEcc_SharedSecret(ecc_key* private_key, ecc_key* public_key, byte* out,
241242
ret = 0;
242243
}
243244
}
245+
ForceZero(priv, sizeof(priv));
244246
}
245247
if (ret == 0) {
246248
#ifdef KCAPI_USE_XMALLOC
@@ -317,6 +319,7 @@ static int KcapiEcc_SetPrivKey(ecc_key* key)
317319
}
318320
}
319321

322+
ForceZero(priv, sizeof(priv));
320323
return ret;
321324
}
322325

0 commit comments

Comments
 (0)