lib/md5,lib/sha256: Use explicit_bzero to clean up sensitive data.

explicit_bzero() is available as an API to clean up sensitive data
and avoid compiler optimizations that remove calls to memset() or bzero().

Signed-off-by: Loganaden Velvindron <logan@cyberstorm.mu>

1 files changed, 1 insertions, 0 deletions

diff --git a/lib/md5.c b/lib/md5.c
index 5c93c7bc1f..20da6488c4 100644
--- a/lib/md5.c
+++ b/lib/md5.c
@@ -439,4 +439,5 @@ void hmac_md5(unsigned char *text, int text_len, unsigned char *key,
 	MD5Update(&context, digest, 16);       /* then results of 1st
 						* hash */
 	MD5Final(digest, &context); /* finish up 2nd pass */
+	explicit_bzero(&context, sizeof(context));
 }