Skip to content

zeroize security keys#297

Open
rherrmannr wants to merge 1 commit intogoToMain:masterfrom
dormakaba:zeroize-security-keys
Open

zeroize security keys#297
rherrmannr wants to merge 1 commit intogoToMain:masterfrom
dormakaba:zeroize-security-keys

Conversation

@rherrmannr
Copy link
Copy Markdown

fix #296

@rherrmannr
Copy link
Copy Markdown
Author

@sidcha could you please check why PlatformIO is failing?

Comment thread src/crypto/tinyaes.c

void osdp_fill_zeros(void *buf, int len)
{
explicit_bzero(buf, (size_t)len);
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

explicit_bzero() is a glibc/BSD extension, AVR libc does not provide it. Please replace this with a more portable version:

Suggested change
explicit_bzero(buf, (size_t)len);
volatile uint8_t *p = (volatile uint8_t *)buf;
while (len--)
*p++ = 0;

Comment thread src/crypto/tinyaes.c

#include <stdint.h>
#include <stdlib.h>
#include <string.h>
Copy link
Copy Markdown
Member

@sidcha sidcha Apr 18, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

With the suggestion below above, you should drop this too.

@sidcha
Copy link
Copy Markdown
Member

sidcha commented Apr 18, 2026

Also please extend the commit message to include the context explained in #296 so git blames at a later time will have more meaningful information.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Zeroize scbk

2 participants