On 20/11/2018 06:49, priya p wrote:
> Hi,
> 
> In openssl-1.1.1, few structures have been made opaque like HMAC_CTX,
> EVP_CIPHER_CTX etc.,
> There are new API to get and set those structure members. But to zeroize those
> structure members in place, I dont see any API.
> Eg : DH strcuture has members like pub_key, priv_key. To zeroize the priv_key 
> ,
> what API should be used ?
> 
> 
> Can anyone clarify this ?

In the case of DH, DH_free() also zeroizes.

Matt

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to