Skip to content

Commit

Permalink
crypto: lib/sha256 - Don't clear temporary variables
Browse files Browse the repository at this point in the history
The assignments to clear a through h and t1/t2 are optimized out by the
compiler because they are unused after the assignments.

Clearing individual scalar variables is unlikely to be useful, as they
may have been assigned to registers, and even if stack spilling was
required, there may be compiler-generated temporaries that are
impossible to clear in any case.

So drop the clearing of a through h and t1/t2.

Signed-off-by: Arvind Sankar <nivedita@alum.mit.edu>
Reviewed-by: Eric Biggers <ebiggers@google.com>
Acked-by: Ard Biesheuvel <ardb@kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
  • Loading branch information
Arvind Sankar authored and Herbert Xu committed Oct 30, 2020
1 parent 458c048 commit 7a4295f
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion lib/crypto/sha256.c
Original file line number Diff line number Diff line change
Expand Up @@ -202,7 +202,6 @@ static void sha256_transform(u32 *state, const u8 *input)
state[4] += e; state[5] += f; state[6] += g; state[7] += h;

/* clear any sensitive info... */
a = b = c = d = e = f = g = h = t1 = t2 = 0;
memzero_explicit(W, 64 * sizeof(u32));
}

Expand Down

0 comments on commit 7a4295f

Please sign in to comment.