Wipe (some) secrets from memory after use

[tinc] / src / ed25519 / ecdsagen.c

diff --git a/src/ed25519/ecdsagen.c b/src/ed25519/ecdsagen.c
index bc14fd2..1edc945 100644 (file)
--- a/src/ed25519/ecdsagen.c
+++ b/src/ed25519/ecdsagen.c
@@ -40,6 +40,7 @@ ecdsa_t *ecdsa_generate(void) {
        uint8_t seed[32];
        randomize(seed, sizeof(seed));
        ed25519_create_keypair(ecdsa->public, ecdsa->private, seed);
+       memzero(seed, sizeof(seed));
 
        return ecdsa;
 }
@@ -60,6 +61,8 @@ static bool write_pem(FILE *fp, const char *type, void *vbuf, size_t size) {
                size -= todo;
        }
 
+       memzero(base64, sizeof(base64));
+
        fprintf(fp, "-----END %s-----\n", type);
        return !ferror(fp);
 }