From 42c938cd6d2f5d05f9959d9e3546fd4589d9f5c5 Mon Sep 17 00:00:00 2001
From: Sean Parkinson <sean@wolfssl.com>
Date: Wed, 1 May 2024 14:24:37 +1000
Subject: [PATCH] wolfSSL FIPS: needs unlocking and locking of key

---
 srtp/srtp.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/srtp/srtp.c b/srtp/srtp.c
index 0189fae94..c7cfad1a0 100644
--- a/srtp/srtp.c
+++ b/srtp/srtp.c
@@ -849,9 +849,11 @@ static srtp_err_status_t srtp_kdf_generate(srtp_kdf_t *kdf,
     }
     octet_string_set_to_zero(key, length);
 
+    PRIVATE_KEY_UNLOCK();
     err = wc_SRTP_KDF_label(kdf->master_key, kdf->master_key_len,
                             kdf->master_salt, MAX_SRTP_SALT_LEN, -1, NULL,
                             label, key, length);
+    PRIVATE_KEY_LOCK();
     if (err < 0) {
         debug_print(mod_srtp, "wolfSSL SRTP KDF error: %d", err);
         return (srtp_err_status_algo_fail);