mbedtls/ChangeLog.d/zeroizations_of_sensitive_data_in_PKCS5_and_SHA.txt at d5253bba324b2a31ad752f152ac424ccbf5dc00f - Suyu/mbedtls - Kizuren Hub

Suyu/mbedtls

mirror of https://git.suyu.dev/suyu/mbedtls.git synced 2025-12-21 21:36:21 +01:00

gabor-mezei-arm d5253bba32

Zeroize internal buffers and variables in PKCS and SHA

Zeroising of local buffers and variables which are used for calculations in
mbedtls_pkcs5_pbkdf2_hmac() and mbedtls_internal_sha*_process() functions
to erase sensitive data from memory.
Checked all function for possible missing zeroisation in PKCS and SHA.

Signed-off-by: gabor-mezei-arm <gabor.mezei@arm.com>

2020-09-09 15:16:01 +02:00

5 lines

279 B

Text

Raw Blame History

 Security
    * Zeroising of local buffers and variables which are used for calculations
      in mbedtls_pkcs5_pbkdf2_hmac() and mbedtls_internal_sha*_process()
      functions to erase sensitive data from memory. Reported by
      Johan Malmgren and Johan Uppman Bruce from Sectra.