WolfSSL
/
wolfcrypt-jni
mirror of https://github.com/wolfSSL/wolfcrypt-jni.git
1
0
Fork 0
Code Issues Releases Wiki Activity

JCE: zero WolfCryptMac.engineInit encodedKey buffer after use

pull/212/head
Ruby Martin 2026-04-24 12:00:27 -06:00
parent 596fa9f651
commit 2e517487f7
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/main/java/com/wolfssl/provider/jce/WolfCryptMac.java
View File

@ -24,6 +24,7 @@ package com.wolfssl.provider.jce;
import javax.crypto.MacSpi;
import java.security.Key;
import java.security.spec.AlgorithmParameterSpec;
import java.util.Arrays;
import java.security.InvalidKeyException;
import java.security.InvalidAlgorithmParameterException;
import java.security.NoSuchAlgorithmException;
@ -232,6 +233,8 @@ public class WolfCryptMac extends MacSpi {
}
} catch (com.wolfssl.wolfcrypt.WolfCryptException e) {
throw new InvalidKeyException("Invalid key: " + e.getMessage());
} finally {
Arrays.fill(encodedKey, (byte)0);
}
log("init with key and spec");