tree d523ff5a1c67700a03f45c07b2e18b43d443a70e
parent 476b157dc44cc9c94b9accb5255f020d62510a17
author Gilles Peskine <Gilles.Peskine@arm.com> 1639168401 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> 1639231185 +0100

Zeroize local MAC variables

Zeroize local MAC variables used for CBC+HMAC cipher suites. In encryption,
this is just good hygiene but probably not needed for security since the
data protected by the MAC that could leak is about to be transmitted anyway.
In DTLS decryption, this could be a security issue since an adversary could
learn the MAC of data that they were trying to inject. At least with
encrypt-then-MAC, the adversary could then easily inject a datagram with
a corrected packet. TLS would still be safe since the receiver would close
the connection after the bad MAC.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>