mirrors/minisign
1
0
Fork 0
mirror of https://github.com/jedisct1/minisign.git synced 2025-04-03 02:47:41 +03:00
Code Issues Projects Releases Packages Wiki Activity

Zeroize seckey_struct early

Browse source
This commit is contained in:
Frank Denis 2023-01-16 21:24:08 +01:00
parent 12fd90b6fe
commit ee46615226
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/minisign.c
View file

@ -677,9 +677,9 @@ generate(const char *pk_file, const char *sk_file, const char *comment, int forc
FILE *fp;
abort_on_existing_key_files(pk_file, sk_file, force);
memset(seckey_struct, 0, sizeof(SeckeyStruct));
randombytes_buf(seckey_struct->keynum_sk.keynum, sizeof seckey_struct->keynum_sk.keynum);
crypto_sign_keypair(pubkey_struct->keynum_pk.pk, seckey_struct->keynum_sk.sk);
memset(seckey_struct, 0, sizeof(SeckeyStruct));
memcpy(seckey_struct->sig_alg, SIGALG, sizeof seckey_struct->sig_alg);
memcpy(seckey_struct->kdf_alg, unencrypted_key ? KDFNONE : KDFALG,
sizeof seckey_struct->kdf_alg);