mirror of
https://codeberg.org/scip/pcp.git
synced 2025-12-16 19:40:57 +01:00
use mzero instead of wasting randomness
This commit is contained in:
@@ -175,12 +175,9 @@ pcp_key_t *pcpkey_encrypt(PCPCTX *ptx, pcp_key_t *key, char *passphrase) {
|
||||
/* success */
|
||||
memcpy(key->encrypted, encrypted, 176);
|
||||
ucfree(encrypted, es);
|
||||
arc4random_buf(key->secret, 32);
|
||||
arc4random_buf(key->edsecret, 64);
|
||||
arc4random_buf(key->mastersecret, 64);
|
||||
key->secret[0] = 0;
|
||||
key->edsecret[0] = 0;
|
||||
key->mastersecret[0] = 0;
|
||||
memset(key->secret, 0, 32);
|
||||
memset(key->edsecret, 0, 64);
|
||||
memset(key->mastersecret, 0, 64);
|
||||
}
|
||||
else {
|
||||
fatal(ptx, "failed to encrypt the secret key!\n");
|
||||
|
||||
Reference in New Issue
Block a user