mirror of
https://github.com/tillitis/tillitis-key1.git
synced 2025-11-19 15:22:51 -05:00
The memset() responsible for the zeroisation of the secure_ctx under the compute_cdi() function in FW's main.c, was optimised away by the compiler. Instead of using memset(), secure_wipe() is introduced which uses a volatile keyword to prevent the compiler to try to optimise it. Secure_wipe() is now used on all locations handling removal of sensitive data. |
||
|---|---|---|
| .. | ||
| testfw | ||
| tk1 | ||
| .clang-format | ||
| tk1_mem.h | ||