Skip to content

SHA-3: zeroize working buffers - #525

Open
padelsbach wants to merge 1 commit into
wolfSSL:mainfrom
padelsbach:f8510
Open

padelsbach wants to merge 1 commit into
wolfSSL:mainfrom
padelsbach:f8510

Conversation

@padelsbach

Copy link
Copy Markdown
Contributor

F-8510: wipe the intermediate buffers in SHA3 client side.

Found during SHAKE dev in PR #523

@AlexLanzano

Copy link
Copy Markdown
Member

Are there any performance implications from this change? Im not entirely convinced that the client needs to zeroize these buffers.

@padelsbach

Copy link
Copy Markdown
Contributor Author

Are there any performance implications from this change? Im not entirely convinced that the client needs to zeroize these buffers.

According to a few benchmark runs, performance impact is < 0.5%, with all the other copying going on.

However, there's not much of a precedent of zeroing hash contents. WolfCrypt wc_Sha3Free doesn't clear it, so maybe the AI findings are getting overly picky. I guess we can drop this unless you see otherwise @AlexLanzano

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants