Add CLI functions to manage the keywrap core, with new auto-zeroise functionality.

1 files changed, 6 insertions, 0 deletions

diff --git a/projects/hsm/mgmt-masterkey.c b/projects/hsm/mgmt-masterkey.c
index e63e0e0..d89e5ea 100644
--- a/projects/hsm/mgmt-masterkey.c
+++ b/projects/hsm/mgmt-masterkey.c
@@ -167,6 +167,12 @@ static int _masterkey_set(struct cli_def *cli, char *argv[], int argc,
     } else {
 	cli_print(cli, "Failed writing key to %s memory: %s", label, hal_error_string(err));
     }
+
+    if ((err = hal_aes_keywrap_zero(NULL)) != LIBHAL_OK) {
+        cli_print(cli, "Error zeroing keywrap core: %s", hal_error_string(err));
+        return CLI_ERROR;
+    }
+
     return CLI_OK;
 }