openssl/providers/implementations/digests
Neil Horman 8b9cf1bc2c cleanse stack variable in blake2[b|s] finalization
If the output of a blake2[b|s] digest isn't a multipl of 8, then a stack
buffer is used to compute the final output, which is left un-zeroed
prior to return, allowing the potential leak of key data.  Ensure that,
if the stack variable is used, it gets cleared prior to return.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23173)
2024-01-03 12:42:01 -05:00
..
blake2_impl.h
blake2_prov.c Fix BLAKE2s reporting the same EVP_MD_get_size() as BLAKE2b (64) 2023-11-15 08:41:06 +01:00
blake2b_prov.c cleanse stack variable in blake2[b|s] finalization 2024-01-03 12:42:01 -05:00
blake2s_prov.c cleanse stack variable in blake2[b|s] finalization 2024-01-03 12:42:01 -05:00
build.info
digestcommon.c
md2_prov.c
md4_prov.c
md5_prov.c
md5_sha1_prov.c
mdc2_prov.c
null_prov.c
ripemd_prov.c
sha2_prov.c Copyright year updates 2023-09-07 09:59:15 +01:00
sha3_prov.c Support EVP_DigestSqueeze() for in the digest provider for s390x. 2023-11-10 15:31:29 +01:00
sm3_prov.c
wp_prov.c