Merge pull request AntonKueltz#67 from botovq/nonce-leak

Avoid leaking nonce in _ecdsa_sign()
sylvainpelissier · Apr 14, 2021 · 7315fa3 · 7315fa3
2 parents e657c59 + 2420058
commit 7315fa3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/_ecdsa.c b/src/_ecdsa.c
@@ -84,7 +84,7 @@ static PyObject * _ecdsa_sign(PyObject *self, PyObject *args) {
 
     char * resultR = mpz_get_str(NULL, 10, sig.r);
     char * resultS = mpz_get_str(NULL, 10, sig.s);
-    mpz_clears(sig.r, sig.s, privKey, NULL);
+    mpz_clears(sig.r, sig.s, privKey, nonce, NULL);
 
     PyObject * ret = Py_BuildValue("ss", resultR, resultS);
     free(resultR);