From 91842048d64ad883b95af2a6980b992c56cb5edc Mon Sep 17 00:00:00 2001
From: Lucas Gabriel Vuotto <lucas@lgv5.net>
Date: Wed, 19 Jun 2024 14:07:57 +0000
Subject: [PATCH] kdf/hkdf: scrub the pseudorandom key

---
 kdf_hkdf.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/kdf_hkdf.c b/kdf_hkdf.c
index d967743..1e733c5 100644
--- a/kdf_hkdf.c
+++ b/kdf_hkdf.c
@@ -91,6 +91,8 @@ hkdf_kdf(uint8_t *out, size_t *outlen, void *initparams, size_t len)
 	memcpy(out, tn, len);
 	*outlen += len;
 
+	lc_scrub(prk, sizeof(prk));
+
 	return 1;
 }