diff options
author | Rob Austein <sra@hactrn.net> | 2018-03-25 19:51:40 -0400 |
---|---|---|
committer | Rob Austein <sra@hactrn.net> | 2018-03-25 19:51:40 -0400 |
commit | 57b551588e3ce4a1e79d8bb8d9d2a409a7cbf202 (patch) | |
tree | 21896d60ae09fa167b4c7a0985c09c62681505a1 /libhal.py | |
parent | 9a956ed5a42301ee1efb5642cc0f381751d917f5 (diff) |
Clear search state variables in rsa.c's find_prime().
Failing to clear the temporary buffer used to transfer bits from the
TRNG into a bignum was a real leak of something very close to keying
material, albeit only onto the local stack where it was almost certain
to have been overwritten by subsequent operations (generation of other
key components, wrap and PKCS #8 encoding) before pkey_generate_rsa()
ever returned to its caller. Still, bad coder, no biscuit.
Failing to clear the remainders array was probably harmless, but
doctrine says clear it anyway.
Diffstat (limited to 'libhal.py')
0 files changed, 0 insertions, 0 deletions