From be911a7aa78364dcb56007d41dae83ff89a49066 Mon Sep 17 00:00:00 2001
From: Pol Henarejos <pol.henarejos@cttc.es>
Date: Fri, 12 Aug 2022 19:55:07 +0200
Subject: [PATCH] Clearing hash, just in case.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
---
 src/hsm/dkek.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/hsm/dkek.c b/src/hsm/dkek.c
index f5ab725..bbf7b8e 100644
--- a/src/hsm/dkek.c
+++ b/src/hsm/dkek.c
@@ -158,6 +158,7 @@ int import_dkek_share(uint8_t id, const uint8_t *share) {
 int dkek_kcv(uint8_t id, uint8_t *kcv) { //kcv 8 bytes
     uint8_t hsh[32], dkek[DKEK_KEY_SIZE];
     memset(kcv, 0, 8);
+    memset(hsh, 0, sizeof(hsh));
     int r = load_dkek(id, dkek);
     if (r != CCID_OK)
         return r;