Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

zeroize rsa->p,rsa->q on error #24358

Closed
wants to merge 1 commit into from
Closed

zeroize rsa->p,rsa->q on error #24358

wants to merge 1 commit into from

Commits on May 14, 2024

  1. zeroize rsa->p,rsa->q on error 

    this is rquired by fipd-186-5 section A.1.6, step 7:
	Zeroize the internally generated values that are not returned

In OpenSSL code we need to zero p, q members of rsa structure. The rsa
structure is provided by ossl_rsa_fips186_4_gen_prob_primes() caller.

The remaining values (variables) mentioned by standard are zeroed
already in functions we call from ossl_rsa_fips186_4_gen_prob_primes().
    @Sashan
    Sashan committed May 14, 2024
    Configuration menu
    Copy the full SHA
    b63e675 View commit details
    Browse the repository at this point in the history