Commit 529d27ea authored by Andy Polyakov's avatar Andy Polyakov
Browse files

e_aes_cbc_hmac_sha1.c: cleanse temporary copy of HMAC secret.

parent b2226c6c

crypto/evp/e_aes_cbc_hmac_sha1.c

+2 −0
Original line number Diff line number Diff line
@@ -474,6 +474,8 @@ static int aesni_cbc_hmac_sha1_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void 
		SHA1_Init(&key->tail);

		SHA1_Update(&key->tail,hmac_key,sizeof(hmac_key));



		OPENSSL_cleanse(hmac_key,sizeof(hmac_key));



		return 1;

		}

	case EVP_CTRL_AEAD_TLS1_AAD: