Skip to contentSkip to conversation

lib/crypto: Add a sentence about zeroizing raw key structures

PATCH Applied Thomas Huth 2 participants 2 messages Nov 5 – Nov 7

Subsystems (3)
Documentation Crypto API Crypto library
lore
Share & tools
lore

Thomas Huth

author
#0 lore raw

PATCH v2 1/1 lib/crypto: Add a sentence about zeroizing raw key structures

Let's make it clear that raw key material has to be zeroized, too.

Suggested-by Eric Biggers <[email protected]>
Signed-off-by Thomas Huth <[email protected]>

---
v2: Move the information into a separate paragraph

 Documentation/crypto/libcrypto-zeroization.rst | 5 +++++
 1 file changed, 5 insertions(+)
Documentation/crypto/libcrypto-zeroization.rst +5 -0
index 76b6506711634..af3a4559b4963 100644
@@ -43,6 +43,11 @@ two purposes:
 What to zeroize
 ---------------
 
+Raw key material (e.g. a plain AES key stored in an array or a caller-
+defined struct) must also be zeroized as soon as it is no longer needed,
+for example right after it has been used to populate one of the key
+structures below.
+
 The following types of structures hold sensitive material and should be
 zeroized after use:
Signature · 1 line
2.56.0
maintainer Applied
#1 lore raw
Quoted 9 lines · Thomas Huth

Let's make it clear that raw key material has to be zeroized, too.

Suggested-by Eric Biggers <[email protected]>
Signed-off-by Thomas Huth <[email protected]>

---
v2: Move the information into a separate paragraph

 Documentation/crypto/libcrypto-zeroization.rst | 5 +++++
 1 file changed, 5 insertions(+)

Applied to https://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux.git/log/?h=libcrypto-next

- Eric