Hello, 

In src/libcharon/sa/ikev2/keymat_v2.c (line 390) when rekeying, the shared 
secret is concatenated with the full nonce using a call to chunk_cat(). The 
secret chunk is moved using the mode "m" which does not clear the chunk 
afterward. 
I think it would be a good idea to change it to "s" since the shared secret 
chunk is usually cleared. 

Thank you. 

Jean-François HREN 
Developper - Network Security R&D 
[ http://www.stormshield.eu/ ] 
        STORMSHIELD 
2/6 Parc de l'Horizon 
59650 Villeneuve d'Ascq - FRANCE 
Mobile : +33 (0)6 23 08 80 81 
[ https://twitter.com/Stormshield | Twitter ] . [ 
https://www.linkedin.com/company/22425?trk=cws-btn-overview-0-0 | LinkedIn ] . 
[ http://www.stormshield.eu/ | www.stormshield.eu ] 

Reply via email to