There are a few places where the RX/TX key for a TLS socket is copied
to kernel memory. This series clears those memory areas when they're no
longer needed.
Sabrina Dubroca (3):
tls: don't copy the key out of tls12_crypto_info_aes_gcm_128
tls: clear key material from kernel memory when do_tls_setsockopt_conf
fails
tls: zero the crypto information from tls_context before freeing
include/net/tls.h | 1 +
net/tls/tls_main.c | 16 +++++++++++++---
net/tls/tls_sw.c | 5 +----
3 files changed, 15 insertions(+), 7 deletions(-)
--
2.18.0
