[openssl/openssl] 96fddf: Consistenly zeroize public parameters based on OPE...

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 96fddf6b9c44af363efeaaa5220301780a98f5ae
      https://github.com/openssl/openssl/commit/96fddf6b9c44af363efeaaa5220301780a98f5ae
  Author: Eugene Syromiatnikov <[email protected]>
  Date:   2026-06-10 (Wed, 10 Jun 2026)

  Changed paths:
    M crypto/ffc/ffc_params.c
    M crypto/rsa/rsa_lib.c
    A include/internal/zeroization.h

  Log Message:
  -----------
  Consistenly zeroize public parameters based on OPENSSL_PEDANTIC_ZEROIZATION

Commit fa338aa7cd1e "fips: zeroization of public security parameters (PSPs)"[1]
introduced zeroization of public security params, which then[2] switched
its usage to OPENSSL_PEDANTIC_ZEROIZATION; however, zeroization has
implemented inconsistently, leaving out public security parameter
updates.  Consistently use newly introduced wrappers,
ossl_public_bn_free and ossl_public_param_free, for freeing such
parameters, and use them for FFC and RSA.

[1] https://github.com/openssl/openssl/pull/24355
[2] https://github.com/openssl/openssl/pull/26068

Complements: fa338aa7cd1e "fips: zeroization of public security parameters (PSPs)"
Signed-off-by: Eugene Syromiatnikov <[email protected]>

Reviewed-by: Milan Broz <[email protected]>
Reviewed-by: Paul Dale <[email protected]>
MergeDate: Wed Jun 10 12:52:14 2026
(Merged from https://github.com/openssl/openssl/pull/31157)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/d1c4d1-96fddf%40github.com.