Commit 1041ab69 authored by Andy Polyakov's avatar Andy Polyakov Committed by Dr. Stephen Henson
Browse files

e_aes_cbc_hmac_sha1.c: cleanse temporary copy of HMAC secret. 

(cherry picked from commit 529d27ea)
parent 9970308c

crypto/evp/e_aes_cbc_hmac_sha1.c

+2 −0
Original line number Diff line number Diff line
@@ -473,6 +473,8 @@ static int aesni_cbc_hmac_sha1_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void 
		SHA1_Init(&key->tail);

		SHA1_Update(&key->tail,hmac_key,sizeof(hmac_key));



		OPENSSL_cleanse(hmac_key,sizeof(hmac_key));



		return 1;

		}

	case EVP_CTRL_AEAD_TLS1_AAD: