Use wipe_spritz_ctx() in hash() and mac()

abderraouf-adjal · Nov 5, 2015 · cdf2610 · cdf2610
1 parent 6e52c71
commit cdf2610
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/SpritzCipher.cpp b/SpritzCipher.cpp
@@ -229,6 +229,9 @@ SpritzCipher::hash(uint8_t *digest, uint8_t digestLen,
   absorbStop(&ctx);
   absorb(&ctx, digestLen);
   squeeze(&ctx, digest, digestLen);
+#ifdef WIPE_AFTER_USAGE
+  wipe_spritz_ctx(&ctx);
+#endif
 }
 
 /* Message Authentication Code (MAC) function */
@@ -250,4 +253,7 @@ SpritzCipher::mac(uint8_t *digest, uint8_t digestLen,
   absorbStop(&ctx);
   absorb(&ctx, digestLen);
   squeeze(&ctx, digest, digestLen);
+#ifdef WIPE_AFTER_USAGE
+  wipe_spritz_ctx(&ctx);
+#endif
 }
diff --git a/SpritzCipher.h b/SpritzCipher.h
@@ -38,7 +38,7 @@
 /** \def WIPE_AFTER_USAGE
  * wipe sensitive buffers and variables in functions when they are no longer needed
  */
-// #define WIPE_AFTER_USAGE
+#define WIPE_AFTER_USAGE
 
 #define SPRITZ_N 256