openssl/include
Martin Elshuber 163b801616 Add support to zeroize plaintext in S3 record layer
Some applications want even all plaintext copies beeing
zeroized. However, currently plaintext residuals are kept in rbuf
within the s3 record layer.

This patch add the option SSL_OP_CLEANSE_PLAINTEXT to its friends to
optionally enable cleansing of decrypted plaintext data.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/12251)
2020-07-07 12:07:47 +03:00
..
crypto Make the naming scheme for dispatched functions more consistent 2020-06-24 22:01:22 +02:00
internal CORE: Add an internal function to distinguish the global default context 2020-06-28 10:55:52 +02:00
openssl Add support to zeroize plaintext in S3 record layer 2020-07-07 12:07:47 +03:00