Hanno Becker 7c8cb9c28b Fix information leak in ecp_gen_keypair_base ...

The function mbedtls_ecp_gen_keypair_base did not wipe the stack buffer used to
hold the private exponent before returning. This commit fixes this by not using
a stack buffer in the first place but instead calling mpi_fill_random directly
to acquire the necessary random MPI.

2017-10-17 15:19:38 +01:00

66 KiB

Raw Blame History

View Raw