Cleanup blake2 state on final iteration

diff --git a/src/libcryptobox/blake2/blake2.c b/src/libcryptobox/blake2/blake2.c
index ecc465b3581a27f0e83d1ef201b92c393a83373d..7d3b281f4fa2088e17853afb2ab6b06cf8d72f64 100644 (file)
--- a/src/libcryptobox/blake2/blake2.c
+++ b/src/libcryptobox/blake2/blake2.c
@@ -242,6 +242,7 @@ blake2b_final (blake2b_state *S, unsigned char *hash)
                        state->leftover,
                        BLAKE2B_STRIDE_NONE);
        blake2b_store_hash (state, hash);
+       rspamd_explicit_memzero (state, sizeof (*state));
 }
 
 /* one-shot hash inlen bytes from in */