[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openssl-dev
Subject:    [openssl.org #343] Fw: When scrubbing secrets in memory doesn't work
From:       "Richard Levitte via RT" <rt () openssl ! org>
Date:       2002-11-29 11:33:39
[Download RAW message or body]


CRYPTO_cleanse() got inserted, but with the name OPENSSL_cleanse().
I believe I got all the cleansing memset()s and have converted them 
to OPENSSL_cleanse().

This ticket is now resolved.

[levitte - Tue Nov 26 17:05:52 2002]:

> [levitte - Thu Nov 21 23:09:40 2002]:
> 
> > Hmm...  I think I'm gonna call this a showstopper.  It's way too 
> late
> > tonight to fix it in a panic and do a panic release.  That's 
just 
> not
> > the right way.
> > 
> > So, if noone else does it, I'm fixing this problem within the 
next 
> few
> > days, and releasing 0.9.6h during next week.  Sorry about that.
> 
> Just a short note: I'm on this, using the CRYPTO_cleanse() that 
> Geoff Thorpe proposed, plus a few extras that he suggested to me 
> privately.
> 
> To be committed tomorrow (or perhaps this evening if I can find 
the 
> time).


-- 
Richard Levitte
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majordomo@openssl.org
[prev in list] [next in list] [prev in thread] [next in thread]