]> git.ipfire.org Git - thirdparty/openssl.git/commit
hmac: stop using secure memory for the HMAC key
authorPauli <ppzgs1@gmail.com>
Mon, 1 Sep 2025 22:48:06 +0000 (08:48 +1000)
committerPauli <ppzgs1@gmail.com>
Sun, 7 Sep 2025 07:24:21 +0000 (17:24 +1000)
commitedbee2a663454b7bd1f56222fee78bde94954694
tree07528c62016b4b6240ecc4bbf5d5d1a84bf04ecb
parent255003535b35f26bb7bdb33c246726dfdc0cfa60
hmac: stop using secure memory for the HMAC key

Secure memory is design for long term storage of private material.
HMAC keys are not this.

Secure memory use was introduced in July 2020 by commit
3fddbb264e87a8cef2903cbd7b02b8e1a39a2a99.

Fixes #28346

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/28411)

(cherry picked from commit 362739d771f671b444cb9a12a34accf2dce8220e)
providers/implementations/macs/hmac_prov.c.in