Skip to content

Commit fb40a68

Browse files
committed
musig: Securely clear secnonce in partial_sign
Replace memset which can be optimized out.
1 parent f36afb8 commit fb40a68

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/modules/musig/session_impl.h

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -679,7 +679,7 @@ int secp256k1_musig_partial_sign(const secp256k1_context* ctx, secp256k1_musig_p
679679
ret = secp256k1_musig_secnonce_load(ctx, k, &pk, secnonce);
680680
/* Set nonce to zero to avoid nonce reuse. This will cause subsequent calls
681681
* of this function to fail */
682-
memset(secnonce, 0, sizeof(*secnonce));
682+
secp256k1_memclear(secnonce, sizeof(*secnonce));
683683
if (!ret) {
684684
secp256k1_musig_partial_sign_clear(&sk, k);
685685
return 0;

0 commit comments

Comments
 (0)