Re: Record Layer Buffers & Zeroization

2020-06-23 Thread Martin Elshuber
ivial" patch anyways. Martin Am 23.06.2020 um 12:19 schrieb Matt Caswell: > > On 22/06/2020 18:28, Martin Elshuber wrote: >> I might be blind, but I just cannot find the location where this >> plaintext data is >> zeroized, neither by OPENSSL_cleanse() nor memset().

Record Layer Buffers & Zeroization

2020-06-22 Thread Martin Elshuber
Hi, I have a question regarding the recordlayer and zeroization of plain text data. To my understanding openssl (I am on v1.1.1g) maintains inbound data for TLS1.2 within SSL.rlayer.rbuf.The data is split into records and the meta information is kept in SSL.rlayer.rrec. The data pointers isself