Skip to content

Commit de66edb

Browse files
committed
F-5035: zeroize PKCS8 spec copy in RSA KeyFactory private key decode
1 parent 8d4e142 commit de66edb

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

src/main/java/com/wolfssl/provider/jce/WolfCryptRSAKeyFactory.java

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -378,6 +378,9 @@ private PrivateKey generatePrivateFromPKCS8(PKCS8EncodedKeySpec keySpec)
378378
if (rsa != null) {
379379
rsa.releaseNativeStruct();
380380
}
381+
if (pkcs8Der != null) {
382+
Arrays.fill(pkcs8Der, (byte)0);
383+
}
381384
}
382385
}
383386

0 commit comments

Comments
 (0)