Skip to content

Commit 40dddb0

Browse files
committed
F-2970 - https://fenrir.wolfssl.com/finding/2970 - Add ForceZero on key material at early return in wolfTPM2_LoadKeyedHashKey
1 parent a251d20 commit 40dddb0

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

src/tpm2_wrap.c

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6823,6 +6823,7 @@ int wolfTPM2_LoadKeyedHashKey(WOLFTPM2_DEV* dev, WOLFTPM2_KEY* key,
68236823
rc = wolfTPM2_GetKeyTemplate_KeyedHash(&createIn.inPublic.publicArea,
68246824
hashAlg, YES, NO);
68256825
if (rc != 0) {
6826+
TPM2_ForceZero(&createIn.inSensitive, sizeof(createIn.inSensitive));
68266827
return rc;
68276828
}
68286829

0 commit comments

Comments
 (0)