QPQ-AG/libsodium
12
0
Fork 0
mirror of https://github.com/jedisct1/libsodium.git synced 2026-08-25 08:37:13 +09:00
Code Issues Packages Projects Releases Wiki Activity

Zero the state afetr AES decryption

Browse Source
This commit is contained in:
Frank Denis
2026-02-10 09:01:00 +01:00
parent 8a8d8a62fa
commit c4e3b4028f
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libsodium/crypto_aead/aes256gcm/aesni/aead_aes256gcm_aesni.c
+5 -1
View File
@@ -970,6 +970,7 @@ crypto_aead_aes256gcm_decrypt_detached(unsigned char *m, unsigned char *nsec,
const unsigned char *k) const unsigned char *k)
{ {
CRYPTO_ALIGN(16) crypto_aead_aes256gcm_state st; CRYPTO_ALIGN(16) crypto_aead_aes256gcm_state st;
int ret;
PREFETCH_WRITE(m); PREFETCH_WRITE(m);
PREFETCH_READ(c); PREFETCH_READ(c);
@@ -977,8 +978,11 @@ crypto_aead_aes256gcm_decrypt_detached(unsigned char *m, unsigned char *nsec,
crypto_aead_aes256gcm_beforenm(&st, k); crypto_aead_aes256gcm_beforenm(&st, k);
return crypto_aead_aes256gcm_decrypt_detached_afternm( ret = crypto_aead_aes256gcm_decrypt_detached_afternm(
m, nsec, c, clen, mac, ad, adlen, npub, (const crypto_aead_aes256gcm_state *) &st); m, nsec, c, clen, mac, ad, adlen, npub, (const crypto_aead_aes256gcm_state *) &st);
sodium_memzero(&st, sizeof st);
return ret;
} }
int int
src/libsodium/crypto_aead/aes256gcm/armcrypto/aead_aes256gcm_armcrypto.c
+5 -1
View File
@@ -988,6 +988,7 @@ crypto_aead_aes256gcm_decrypt_detached(unsigned char *m, unsigned char *nsec,
const unsigned char *k) const unsigned char *k)
{ {
CRYPTO_ALIGN(16) crypto_aead_aes256gcm_state st; CRYPTO_ALIGN(16) crypto_aead_aes256gcm_state st;
int ret;
PREFETCH_WRITE(m); PREFETCH_WRITE(m);
PREFETCH_READ(c); PREFETCH_READ(c);
@@ -995,8 +996,11 @@ crypto_aead_aes256gcm_decrypt_detached(unsigned char *m, unsigned char *nsec,
crypto_aead_aes256gcm_beforenm(&st, k); crypto_aead_aes256gcm_beforenm(&st, k);
return crypto_aead_aes256gcm_decrypt_detached_afternm( ret = crypto_aead_aes256gcm_decrypt_detached_afternm(
m, nsec, c, clen, mac, ad, adlen, npub, (const crypto_aead_aes256gcm_state *) &st); m, nsec, c, clen, mac, ad, adlen, npub, (const crypto_aead_aes256gcm_state *) &st);
sodium_memzero(&st, sizeof st);
return ret;
} }
int int