]> git.ipfire.org Git - thirdparty/openssl.git/commit
Properly zeroize ML-KEM z and d values
authorJoachim Vandersmissen <git@jvdsn.com>
Fri, 18 Apr 2025 17:48:24 +0000 (12:48 -0500)
committerTomas Mraz <tomas@openssl.org>
Fri, 25 Apr 2025 07:47:10 +0000 (09:47 +0200)
commit5d44f67aafb26ea3adcd33cd6d34bc17e40466cb
tree2b5c05a03b4a8b1d56d7e9bf86be4c739f7e1024
parentb637fbe781ab40afca700a44fa78b8748f5892dd
Properly zeroize ML-KEM z and d values

Ensure z and d are actually zeroized by cleansing the full size of s,
rather than just vector_bytes.

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27437)
crypto/ml_kem/ml_kem.c