Skip to content

Commit 04cc957

Browse files
committed
zeroize update key material
F/1888
1 parent 35142e6 commit 04cc957

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

src/update_flash.c

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1202,6 +1202,8 @@ static int RAMFUNCTION wolfBoot_update(int fallback_allowed)
12021202
/* Save the encryption key after swapping */
12031203
#ifdef EXT_ENCRYPTED
12041204
wolfBoot_set_encrypt_key(key, nonce);
1205+
wolfBoot_zeroize(key, sizeof(key));
1206+
wolfBoot_zeroize(nonce, sizeof(nonce));
12051207
#endif
12061208
#endif /* DISABLE_BACKUP */
12071209
#ifdef EXT_ENCRYPTED

0 commit comments

Comments
 (0)