summaryrefslogtreecommitdiffstats
path: root/lib
diff options
context:
space:
mode:
authorEric Biggers <ebiggers@google.com>2017-06-08 14:49:11 +0100
committerJames Morris <james.l.morris@oracle.com>2017-06-09 13:29:48 +1000
commita9dd74b252e04b7e41ffe78d418b896b33b70a13 (patch)
treef24d382b8b346df646071b491f2db395a1735b65 /lib
parent6966c74932b328b3d6df92b11b083bfbcd067986 (diff)
downloadop-kernel-dev-a9dd74b252e04b7e41ffe78d418b896b33b70a13.zip
op-kernel-dev-a9dd74b252e04b7e41ffe78d418b896b33b70a13.tar.gz
KEYS: encrypted: sanitize all key material
For keys of type "encrypted", consistently zero sensitive key material before freeing it. This was already being done for the decrypted payloads of encrypted keys, but not for the master key and the keys derived from the master key. Out of an abundance of caution and because it is trivial to do so, also zero buffers containing the key payload in encrypted form, although depending on how the encrypted-keys feature is used such information does not necessarily need to be kept secret. Cc: Mimi Zohar <zohar@linux.vnet.ibm.com> Cc: David Safford <safford@us.ibm.com> Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: James Morris <james.l.morris@oracle.com>
Diffstat (limited to 'lib')
0 files changed, 0 insertions, 0 deletions
OpenPOWER on IntegriCloud