Use explicit_bzero() instead of OPENSSL_cleanse().

2 files changed, 5 insertions, 5 deletions

diff --git a/src/lib/libcrypto/cms/cms_env.c b/src/lib/libcrypto/cms/cms_env.c
index 38d6b5649c..a27c27f726 100644
--- a/src/lib/libcrypto/cms/cms_env.c
+++ b/src/lib/libcrypto/cms/cms_env.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: cms_env.c,v 1.18 2019/08/11 10:41:49 jsing Exp $ */
+/* $OpenBSD: cms_env.c,v 1.19 2019/08/11 10:43:24 jsing Exp $ */
 /*
  * Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project.
@@ -716,7 +716,7 @@ cms_RecipientInfo_kekri_encrypt(CMS_ContentInfo *cms, CMS_RecipientInfo *ri)
  err:
         if (!r)
                 free(wkey);
-        OPENSSL_cleanse(&actx, sizeof(actx));
+        explicit_bzero(&actx, sizeof(actx));
 
         return r;
 }
@@ -782,7 +782,7 @@ cms_RecipientInfo_kekri_decrypt(CMS_ContentInfo *cms, CMS_RecipientInfo *ri)
 
         if (!r)
                 free(ukey);
-        OPENSSL_cleanse(&actx, sizeof(actx));
+        explicit_bzero(&actx, sizeof(actx));
 
         return r;
 }
diff --git a/src/lib/libcrypto/cms/cms_kari.c b/src/lib/libcrypto/cms/cms_kari.c
index 19513e3658..ca3e6d75de 100644
--- a/src/lib/libcrypto/cms/cms_kari.c
+++ b/src/lib/libcrypto/cms/cms_kari.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: cms_kari.c,v 1.8 2019/08/11 10:41:49 jsing Exp $ */
+/* $OpenBSD: cms_kari.c,v 1.9 2019/08/11 10:43:24 jsing Exp $ */
 /*
  * Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project.
@@ -266,7 +266,7 @@ cms_kek_cipher(unsigned char **pout, size_t *poutlen, const unsigned char *in,
         rv = 1;
 
  err:
-        OPENSSL_cleanse(kek, keklen);
+        explicit_bzero(kek, keklen);
         if (!rv)
                 free(out);
         EVP_CIPHER_CTX_reset(kari->ctx);