diff options
| author |   Eric Biggers <ebiggers@google.com> | 2017-06-08 14:49:11 +0100 |
|---|---|---|
| committer |   James Morris <james.l.morris@oracle.com> | 2017-06-09 13:29:48 +1000 |
| commit | a9dd74b252e04b7e41ffe78d418b896b33b70a13 (patch) | |
| tree | f24d382b8b346df646071b491f2db395a1735b65 /security/keys/trusted.c | |
| parent | KEYS: user_defined: sanitize key payloads (diff) | |
| download | linux-dev-a9dd74b252e04b7e41ffe78d418b896b33b70a13.tar.xz linux-dev-a9dd74b252e04b7e41ffe78d418b896b33b70a13.zip | |
KEYS: encrypted: sanitize all key material
For keys of type "encrypted", consistently zero sensitive key material
before freeing it. This was already being done for the decrypted
payloads of encrypted keys, but not for the master key and the keys
derived from the master key.
Out of an abundance of caution and because it is trivial to do so, also
zero buffers containing the key payload in encrypted form, although
depending on how the encrypted-keys feature is used such information
does not necessarily need to be kept secret.
Cc: Mimi Zohar <zohar@linux.vnet.ibm.com>
Cc: David Safford <safford@us.ibm.com>
Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: James Morris <james.l.morris@oracle.com>
Diffstat (limited to 'security/keys/trusted.c')
0 files changed, 0 insertions, 0 deletions