cheng/libsodium
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Clear the seed in crypto_sign_keypair() - Reported by the Stanford SCS group.

Browse Source
This commit is contained in:
Frank Denis 2014-08-15 11:57:50 -07:00
parent 473e1718cc
commit 2947ea863d
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/libsodium/crypto_sign/ed25519/ref10/keypair.c
View File

@ -30,9 +30,13 @@ int crypto_sign_seed_keypair(unsigned char *pk, unsigned char *sk,
int crypto_sign_keypair(unsigned char *pk, unsigned char *sk) int crypto_sign_keypair(unsigned char *pk, unsigned char *sk)
{ {
unsigned char seed[32]; unsigned char seed[32];
int ret;
randombytes(seed,32); randombytes(seed, sizeof seed);
return crypto_sign_seed_keypair(pk,sk,seed); ret = crypto_sign_seed_keypair(pk, sk, seed);
sodium_memzero(seed, sizeof seed);
return ret;
} }
int crypto_sign_ed25519_pk_to_curve25519(unsigned char *curve25519_pk, int crypto_sign_ed25519_pk_to_curve25519(unsigned char *curve25519_pk,