keygen_lms: zero LmsKey after free

danielinux · danielinux · commit 91e0b1678861 · 2026-04-15T17:26:18.000+02:00
F/2589
diff --git a/tools/keytools/keygen.c b/tools/keytools/keygen.c
@@ -948,6 +948,7 @@ static void keygen_lms(const char *priv_fname, uint32_t id_mask)
     keystore_add(AUTH_KEY_LMS, lms_pub, KEYSTORE_PUBKEY_SIZE_LMS, priv_fname, id_mask);
 
     wc_LmsKey_Free(&key);
+    wc_ForceZero(&key, sizeof(key));
 }
 
 #include "../xmss/xmss_common.h"

Original file line number	Diff line number	Diff line change
`@@ -948,6 +948,7 @@ static void keygen_lms(const char *priv_fname, uint32_t id_mask)`
`948`	`948`	`keystore_add(AUTH_KEY_LMS, lms_pub, KEYSTORE_PUBKEY_SIZE_LMS, priv_fname, id_mask);`
`949`	`949`
`950`	`950`	`wc_LmsKey_Free(&key);`
	`951`	`+ wc_ForceZero(&key, sizeof(key));`
`951`	`952`	`}`
`952`	`953`
`953`	`954`	`#include "../xmss/xmss_common.h"`