summaryrefslogtreecommitdiffstats
path: root/openpgp/src/crypto/backend/rust/asymmetric.rs
diff options
context:
space:
mode:
Diffstat (limited to 'openpgp/src/crypto/backend/rust/asymmetric.rs')
-rw-r--r--openpgp/src/crypto/backend/rust/asymmetric.rs4
1 files changed, 2 insertions, 2 deletions
diff --git a/openpgp/src/crypto/backend/rust/asymmetric.rs b/openpgp/src/crypto/backend/rust/asymmetric.rs
index 6ed97575..d0d199f5 100644
--- a/openpgp/src/crypto/backend/rust/asymmetric.rs
+++ b/openpgp/src/crypto/backend/rust/asymmetric.rs
@@ -14,7 +14,7 @@ use rsa::{Pkcs1v15Encrypt, RsaPublicKey, RsaPrivateKey, Pkcs1v15Sign};
use crate::{Error, Result};
use crate::crypto::asymmetric::KeyPair;
use crate::crypto::backend::interface::Asymmetric;
-use crate::crypto::mem::Protected;
+use crate::crypto::mem::{Protected, zero_stack};
use crate::crypto::mpi::{self, MPI, ProtectedMPI};
use crate::crypto::SessionKey;
use crate::crypto::pad_truncating;
@@ -119,7 +119,7 @@ impl Asymmetric for super::Backend {
-> Result<[u8; 64]> {
use ed25519_dalek::{SigningKey, Signer};
let pair: SigningKey = secret.try_into()?;
- Ok(pair.sign(digest).to_bytes().try_into()?)
+ Ok(zero_stack::<256, _>(pair.sign(digest)).to_bytes().try_into()?)
}
fn ed25519_verify(public: &[u8; 32], digest: &[u8], signature: &[u8; 64])