mbedtls/ChangeLog.d/zeroizations_of_sensitive_data_in_PKCS5_and_SHA.txt at 461c5a89dfd9cccd76815b2ce38e1edc501edf77 - yuzu/mbedtls - Forgejo

yuzu/mbedtls

mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-01-27 14:11:13 +00:00

gabor-mezei-arm 461c5a89df

Zeroize internal buffers and variables in PKCS and SHA

Zeroising of local buffers and variables which are used for calculations in
mbedtls_pkcs5_pbkdf2_hmac() and mbedtls_internal_sha*_process() functions
to erase sensitive data from memory.
Checked all function for possible missing zeroisation in PKCS and SHA.

Signed-off-by: gabor-mezei-arm <gabor.mezei@arm.com>

2020-09-09 14:49:31 +02:00

6 lines

279 B

Plaintext

Raw Blame History

 Security
    * Zeroising of local buffers and variables which are used for calculations
      in mbedtls_pkcs5_pbkdf2_hmac() and mbedtls_internal_sha*_process()
      functions to erase sensitive data from memory. Reported by
      Johan Malmgren and Johan Uppman Bruce from Sectra.