denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

overwrite shared_key with random bytes before freeing it

Browse Source
This commit is contained in:
Andreas Steffen
2007-09-11 21:06:46 +00:00
parent e5f33737ab
commit 1cb2cb622e
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/sa/authenticators/psk_authenticator.c
+2 -2
View File
@@ -124,7 +124,7 @@ static status_t verify(private_psk_authenticator_t *this, chunk_t ike_sa_init,
auth_data = build_shared_key_signature(ike_sa_init, my_nonce, shared_key, auth_data = build_shared_key_signature(ike_sa_init, my_nonce, shared_key,
other_id, this->ike_sa->get_skp_verify(this->ike_sa), other_id, this->ike_sa->get_skp_verify(this->ike_sa),
this->ike_sa->get_prf(this->ike_sa)); this->ike_sa->get_prf(this->ike_sa));
chunk_free(&shared_key); chunk_free_randomized(&shared_key);
recv_auth_data = auth_payload->get_data(auth_payload); recv_auth_data = auth_payload->get_data(auth_payload);
if (auth_data.len != recv_auth_data.len || if (auth_data.len != recv_auth_data.len ||
@@ -168,7 +168,7 @@ static status_t build(private_psk_authenticator_t *this, chunk_t ike_sa_init,
my_id, this->ike_sa->get_skp_build(this->ike_sa), my_id, this->ike_sa->get_skp_build(this->ike_sa),
this->ike_sa->get_prf(this->ike_sa)); this->ike_sa->get_prf(this->ike_sa));
DBG2(DBG_IKE, "successfully created shared key MAC"); DBG2(DBG_IKE, "successfully created shared key MAC");
chunk_free(&shared_key); chunk_free_randomized(&shared_key);
*auth_payload = auth_payload_create(); *auth_payload = auth_payload_create();
(*auth_payload)->set_auth_method(*auth_payload, AUTH_PSK); (*auth_payload)->set_auth_method(*auth_payload, AUTH_PSK);
(*auth_payload)->set_data(*auth_payload, auth_data); (*auth_payload)->set_data(*auth_payload, auth_data);