diff options
-rw-r--r-- | src/lib/libcrypto/kdf/tls1_prf.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/lib/libcrypto/kdf/tls1_prf.c b/src/lib/libcrypto/kdf/tls1_prf.c index d08c32d270..dae42b684f 100644 --- a/src/lib/libcrypto/kdf/tls1_prf.c +++ b/src/lib/libcrypto/kdf/tls1_prf.c | |||
@@ -50,7 +50,7 @@ static void pkey_tls1_prf_cleanup(EVP_PKEY_CTX *ctx) | |||
50 | { | 50 | { |
51 | TLS1_PRF_PKEY_CTX *kctx = ctx->data; | 51 | TLS1_PRF_PKEY_CTX *kctx = ctx->data; |
52 | freezero(kctx->sec, kctx->seclen); | 52 | freezero(kctx->sec, kctx->seclen); |
53 | OPENSSL_cleanse(kctx->seed, kctx->seedlen); | 53 | explicit_bzero(kctx->seed, kctx->seedlen); |
54 | OPENSSL_free(kctx); | 54 | OPENSSL_free(kctx); |
55 | } | 55 | } |
56 | 56 | ||
@@ -67,7 +67,7 @@ static int pkey_tls1_prf_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2) | |||
67 | return 0; | 67 | return 0; |
68 | if (kctx->sec != NULL) | 68 | if (kctx->sec != NULL) |
69 | freezero(kctx->sec, kctx->seclen); | 69 | freezero(kctx->sec, kctx->seclen); |
70 | OPENSSL_cleanse(kctx->seed, kctx->seedlen); | 70 | explicit_bzero(kctx->seed, kctx->seedlen); |
71 | kctx->seedlen = 0; | 71 | kctx->seedlen = 0; |
72 | kctx->sec = OPENSSL_memdup(p2, p1); | 72 | kctx->sec = OPENSSL_memdup(p2, p1); |
73 | if (kctx->sec == NULL) | 73 | if (kctx->sec == NULL) |
@@ -240,7 +240,7 @@ static int tls1_prf_P_hash(const EVP_MD *md, | |||
240 | EVP_MD_CTX_free(ctx); | 240 | EVP_MD_CTX_free(ctx); |
241 | EVP_MD_CTX_free(ctx_tmp); | 241 | EVP_MD_CTX_free(ctx_tmp); |
242 | EVP_MD_CTX_free(ctx_init); | 242 | EVP_MD_CTX_free(ctx_init); |
243 | OPENSSL_cleanse(A1, sizeof(A1)); | 243 | explicit_bzero(A1, sizeof(A1)); |
244 | return ret; | 244 | return ret; |
245 | } | 245 | } |
246 | 246 | ||