Merge pull request #707 from SparkiDev/wolfssl_fips_fix

wolfSSL FIPS: needs unlocking and locking of key
cisco · May 2, 2024 · ed16d72 · ed16d72
2 parents d625a3f + 42c938c
commit ed16d72
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/srtp/srtp.c b/srtp/srtp.c
@@ -849,9 +849,11 @@ static srtp_err_status_t srtp_kdf_generate(srtp_kdf_t *kdf,
     }
     octet_string_set_to_zero(key, length);
 
+    PRIVATE_KEY_UNLOCK();
     err = wc_SRTP_KDF_label(kdf->master_key, kdf->master_key_len,
                             kdf->master_salt, MAX_SRTP_SALT_LEN, -1, NULL,
                             label, key, length);
+    PRIVATE_KEY_LOCK();
     if (err < 0) {
         debug_print(mod_srtp, "wolfSSL SRTP KDF error: %d", err);
         return (srtp_err_status_algo_fail);