Zeroize output buffer, upon authentication faliure.

Ron Eldor · Ron Eldor · commit 53c02d745774 · 2018-11-26T15:01:02.000+02:00
Clear output buffer upon failure.
diff --git a/features/cryptocell/FEATURE_CRYPTOCELL310/ccm_alt.c b/features/cryptocell/FEATURE_CRYPTOCELL310/ccm_alt.c
@@ -146,6 +146,8 @@ int mbedtls_ccm_auth_decrypt( mbedtls_ccm_context *ctx, size_t length,
     }
 
 exit:
+    if( ret != 0 )
+        mbedtls_platform_zeroize( output, length );
     return( ret );
 
 }

Original file line number	Diff line number	Diff line change
`@@ -146,6 +146,8 @@ int mbedtls_ccm_auth_decrypt( mbedtls_ccm_context *ctx, size_t length,`
`146`	`146`	`}`
`147`	`147`
`148`	`148`	`exit:`
	`149`	`+ if( ret != 0 )`
	`150`	`+ mbedtls_platform_zeroize( output, length );`
`149`	`151`	`return( ret );`
`150`	`152`
`151`	`153`	`}`