schnorrsig: clear out masked secret key in BIP-340 nonce function

2025-01-29 03:59:32 +01:00
parent f79f46c703
commit a82287fb85
1 changed files with 2 additions and 0 deletions
--- a/src/modules/schnorrsig/main_impl.h
+++ b/src/modules/schnorrsig/main_impl.h
@@ -94,6 +94,8 @@ static int nonce_function_bip340(unsigned char *nonce32, const unsigned char *ms
    secp256k1_sha256_write(&sha, msg, msglen);
    secp256k1_sha256_finalize(&sha, nonce32);
    secp256k1_sha256_clear(&sha);
+    secp256k1_memclear(masked_key, sizeof(masked_key));
+
    return 1;
 }