]> git.ipfire.org Git - thirdparty/openssl.git/commit
hmac: stop using secure memory for the HMAC key
authorPauli <ppzgs1@gmail.com>
Mon, 1 Sep 2025 22:48:06 +0000 (08:48 +1000)
committerPauli <ppzgs1@gmail.com>
Sun, 7 Sep 2025 07:25:25 +0000 (17:25 +1000)
commit459ecf9ff5e11e766e10d2d756e91378d943e4a4
tree4c2821b9ea4f15d79894da40ff77bb9a56a8c5ca
parent4ed6cfce586f7a78c0e7e3d314c2b785ac16f1a9
hmac: stop using secure memory for the HMAC key

Secure memory is design for long term storage of private material.
HMAC keys are not this.

Secure memory use was introduced in July 2020 by commit
3fddbb264e87a8cef2903cbd7b02b8e1a39a2a99.

Fixes #28346

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/28411)

(cherry picked from commit 362739d771f671b444cb9a12a34accf2dce8220e)
providers/implementations/macs/hmac_prov.c