From 03aa4e2eead24982e97b0b163d537e073f748718 Mon Sep 17 00:00:00 2001 From: tb <> Date: Mon, 4 May 2026 20:44:36 +0000 Subject: mlkem: also zero the failure_key from logan https://github.com/libressl/openbsd/pull/154 --- src/lib/libcrypto/mlkem/mlkem_internal.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'src/lib/libcrypto') diff --git a/src/lib/libcrypto/mlkem/mlkem_internal.c b/src/lib/libcrypto/mlkem/mlkem_internal.c index 12b1c3e235..2e707704a4 100644 --- a/src/lib/libcrypto/mlkem/mlkem_internal.c +++ b/src/lib/libcrypto/mlkem/mlkem_internal.c @@ -1,4 +1,4 @@ -/* $OpenBSD: mlkem_internal.c,v 1.8 2026/03/29 06:31:07 tb Exp $ */ +/* $OpenBSD: mlkem_internal.c,v 1.9 2026/05/04 20:44:36 tb Exp $ */ /* * Copyright (c) 2024, Google Inc. * Copyright (c) 2024, 2025 Bob Beck @@ -1137,6 +1137,7 @@ mlkem_decap(const MLKEM_private_key *private_key, const uint8_t *ciphertext, err: freezero(expected_ciphertext, expected_ciphertext_length); explicit_bzero(key_and_randomness, sizeof(key_and_randomness)); + explicit_bzero(failure_key, sizeof(failure_key)); explicit_bzero(decrypted, sizeof(decrypted)); return ret; -- cgit v1.2.3-55-g6feb