diff options
author | Paul Selkirk <paul@psgd.org> | 2019-02-13 16:05:42 -0500 |
---|---|---|
committer | Paul Selkirk <paul@psgd.org> | 2019-02-13 16:05:42 -0500 |
commit | e529855f7e15a14fed0ee16c9af1b55d7c55c660 (patch) | |
tree | 9e5c742b6550ee89449d015bf2f412a8b81ee280 /rpc.c | |
parent | 9bf6075da2640dc57d5a9de5825a249cb3f827c3 (diff) |
If a KEK is given to keywrap/unwrap, zero it out of the keywrap core after use.
The key-export mechanism unwraps the key with the KEK from Master Key
Memory, then re-wraps it with a random KEK. If that random KEK stays in
the keywrap core, it will cause problems for all subsequent wrap/unwrap
operations.
Diffstat (limited to 'rpc.c')
0 files changed, 0 insertions, 0 deletions