Clear decrypted block from stack (#1190)

This commit is contained in:
Steve Thomas 2022-06-18 13:32:35 -05:00 committed by Frank Denis
parent 77ab3f8811
commit d69a2342bc

View File

@ -121,6 +121,7 @@ crypto_secretbox_open_detached(unsigned char *m, const unsigned char *c,
for (i = 0U; i < mlen0; i++) { for (i = 0U; i < mlen0; i++) {
m[i] = block0[i + crypto_secretbox_ZEROBYTES]; m[i] = block0[i + crypto_secretbox_ZEROBYTES];
} }
sodium_memzero(block0, sizeof block0);
if (clen > mlen0) { if (clen > mlen0) {
crypto_stream_salsa20_xor_ic(m + mlen0, c + mlen0, clen - mlen0, crypto_stream_salsa20_xor_ic(m + mlen0, c + mlen0, clen - mlen0,
n + 16, 1U, subkey); n + 16, 1U, subkey);