mirror of
https://codeberg.org/scip/pcp.git
synced 2025-12-18 12:20:58 +01:00
use mzero instead of wasting randomness
This commit is contained in:
@@ -175,12 +175,9 @@ pcp_key_t *pcpkey_encrypt(PCPCTX *ptx, pcp_key_t *key, char *passphrase) {
|
|||||||
/* success */
|
/* success */
|
||||||
memcpy(key->encrypted, encrypted, 176);
|
memcpy(key->encrypted, encrypted, 176);
|
||||||
ucfree(encrypted, es);
|
ucfree(encrypted, es);
|
||||||
arc4random_buf(key->secret, 32);
|
memset(key->secret, 0, 32);
|
||||||
arc4random_buf(key->edsecret, 64);
|
memset(key->edsecret, 0, 64);
|
||||||
arc4random_buf(key->mastersecret, 64);
|
memset(key->mastersecret, 0, 64);
|
||||||
key->secret[0] = 0;
|
|
||||||
key->edsecret[0] = 0;
|
|
||||||
key->mastersecret[0] = 0;
|
|
||||||
}
|
}
|
||||||
else {
|
else {
|
||||||
fatal(ptx, "failed to encrypt the secret key!\n");
|
fatal(ptx, "failed to encrypt the secret key!\n");
|
||||||
|
|||||||
Reference in New Issue
Block a user