> -----Original Message-----
> From: Kusztal, ArkadiuszX
> Sent: Thursday, February 7, 2019 10:55 AM
> To: [email protected]
> Cc: [email protected]; Trahe, Fiona <[email protected]>; 
> [email protected];
> [email protected]; [email protected]; Kusztal, 
> ArkadiuszX
> <[email protected]>
> Subject: [PATCH] openssl: fix not clearing big numbers after computations
> 
> After performing mod exp and mod inv big numbers (BIGNUM) should
> be cleared as data already is copied into op fields and this BNs would
> very likely contain private information for unspecified amount of time
> (duration of the session).
> 
> Fixes: 3e9d6bd447fb ("crypto/openssl: add RSA and mod asym operations")
> 
> Signed-off-by: Arek Kusztal <[email protected]>
Acked-by: Fiona Trahe <[email protected]>

Reply via email to