Skip to content

MissingZeroization.md

Latest commit

 

History

History
15 lines (11 loc) · 689 Bytes

MissingZeroization.md

File metadata and controls

15 lines (11 loc) · 689 Bytes

Missing zeroization of potentially sensitive random BIGNUM

Randomly generated BIGNUMs often represent sensitive data (e.g. like ECDSA nonces). These should be cleared as they go out of scope to ensure that sensitive data does not remain in memory longer than required.

This query identifies OpenSSL BIGNUMs which are initialized using BN_rand but are not zeroized using BN_clear or BN_clear_free before they go out of scope. The following example function would be flagged as an issue by the query.

void compute() {
    BIGNUM *n = BN_new();
    BN_rand(n, 128, BN_RAND_TOP_ANY, BN_RAND_BOTTOM_ANY);

    // Perform sensitive computation using `n`.

    BN_free(n);
}