From e0e99c1dd32b33aa6325d2601dd8c945d568ea1c Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 11 Jul 2023 11:59:46 +0200
Subject: [PATCH] sha3: Make sure to wipe the internal Keccak state

---
 src/libstrongswan/plugins/sha3/sha3_keccak.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/libstrongswan/plugins/sha3/sha3_keccak.c b/src/libstrongswan/plugins/sha3/sha3_keccak.c
index 57f6885c5..e56df0110 100644
--- a/src/libstrongswan/plugins/sha3/sha3_keccak.c
+++ b/src/libstrongswan/plugins/sha3/sha3_keccak.c
@@ -462,6 +462,7 @@ METHOD(sha3_keccak_t, squeeze, void,
 METHOD(sha3_keccak_t, destroy, void,
 	private_sha3_keccak_t *this)
 {
+	memwipe(this->state, sizeof(this->state));
 	free(this);
 }