zeroize update key material

F/1888
2026-04-08 17:04:37 +02:00 · 2026-04-08 17:04:37 +02:00 · 04cc957d6f
parent 35142e6945
commit 04cc957d6f
1 changed files with 2 additions and 0 deletions
--- a/src/update_flash.c
+++ b/src/update_flash.c
@ -1202,6 +1202,8 @@ static int RAMFUNCTION wolfBoot_update(int fallback_allowed)
    /* Save the encryption key after swapping */
 #ifdef EXT_ENCRYPTED
    wolfBoot_set_encrypt_key(key, nonce);
+    wolfBoot_zeroize(key, sizeof(key));
+    wolfBoot_zeroize(nonce, sizeof(nonce));
 #endif
 #endif /* DISABLE_BACKUP */
 #ifdef EXT_ENCRYPTED