From e763c3ef1485404585b923365f93314aab4e8dd6 Mon Sep 17 00:00:00 2001
From: Laurent Bercot <ska-skaware@skarnet.org>
Date: Sun, 30 May 2021 09:19:26 +0000
Subject:  Start work on bearssl server-side sni

---
 src/sbearssl/sbearssl_skey_wipe.c | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 src/sbearssl/sbearssl_skey_wipe.c

(limited to 'src/sbearssl/sbearssl_skey_wipe.c')

diff --git a/src/sbearssl/sbearssl_skey_wipe.c b/src/sbearssl/sbearssl_skey_wipe.c
new file mode 100644
index 0000000..208f89f
--- /dev/null
+++ b/src/sbearssl/sbearssl_skey_wipe.c
@@ -0,0 +1,26 @@
+/* ISC license. */
+
+#include <bearssl.h>
+
+#include <skalibs/bytestr.h>
+
+#include <s6-networking/sbearssl.h>
+
+void sbearssl_skey_wipe (sbearssl_skey *key, char *s)
+{
+  switch (key->type)
+  {
+    case BR_KEYTYPE_RSA :
+      byte_zzero(s + key->rsa.p, key->rsa.plen) ;
+      byte_zzero(s + key->rsa.q, key->rsa.qlen) ;
+      byte_zzero(s + key->rsa.dp, key->rsa.dplen) ;
+      byte_zzero(s + key->rsa.dq, key->rsa.dqlen) ;
+      byte_zzero(s + key->rsa.iq, key->rsa.iqlen) ;
+      break ;
+    case BR_KEYTYPE_EC :
+      byte_zzero(s + key->ec.x, key->ec.xlen) ;
+      break ;
+    default : break ;
+  }
+  byte_zzero(key, sizeof(sbearssl_skey)) ;
+}
-- 
cgit v1.3.1