diff --git a/lib/crypto_backend/pbkdf_check.c b/lib/crypto_backend/pbkdf_check.c index d5e12572..87de6f56 100644 --- a/lib/crypto_backend/pbkdf_check.c +++ b/lib/crypto_backend/pbkdf_check.c @@ -300,6 +300,7 @@ static int crypt_argon2_check(const char *kdf, const char *password, } while (ms < ms_atleast || ms > ms_atmost); out: if (key) { + /* Key can be derived from a real provided password */ crypt_backend_memzero(key, key_length); free(key); } @@ -381,6 +382,7 @@ static int crypt_pbkdf_check(const char *kdf, const char *hash, } out: if (key) { + /* Key can be derived from a real provided password */ crypt_backend_memzero(key, key_length); free(key); }