memzero az in crypto_signed_detached. via Stanford SCS.

10 years ago · d3403d1e01
1 changed files with 1 additions and 0 deletions
--- a/src/libsodium/crypto_sign/ed25519/ref10/sign.c
+++ b/src/libsodium/crypto_sign/ed25519/ref10/sign.c
@ -45,6 +45,7 @@ crypto_sign_detached(unsigned char *sig, unsigned long long *siglen,
    sc_reduce(hram);
    sc_muladd(sig + 32, hram, az, nonce);

+    sodium_memzero(az, sizeof az);
    sodium_memzero(nonce, sizeof nonce);

    if (siglen != NULL) {