|
Description
|
synopsis says it all.
The following section in both functions:
/* zeroize sensitive information */
bzero(ctx, sizeof (*ctx));
is pointless since this is the vanilla digest code, with no sensitive information
in the contexts.
If at all, *only* the parts that have expanded keys in MAC (SSL3 or HMAC) contexts
should be bzero'ed on free. MD5 and SHA's one-wayness guarantee that no key
can be recovered from the remaining parts of the digest context.
xxxxx@xxxxx.com 2005-05-02 20:10:52 GMT
|