[openssl-users] openssl 1.1.1 opaque structures

Matt Caswell matt at openssl.org
Tue Nov 20 15:29:22 UTC 2018



On 20/11/2018 15:27, Michael Richardson wrote:
> priya p <priyahere223 at gmail.com> wrote:
>     > In openssl-1.1.1, few structures have been made opaque like HMAC_CTX,
>     > EVP_CIPHER_CTX etc.,
> 
>     > There are new API to get and set those structure members. But to
>     > zeroize those structure members in place, I dont see any API.
> 
> "in place", do you mean because you've allocated them as auto variables
> on the stack?

It is not possible to allocate opaque structures on the stack. The compiler will
complain.

Matt



More information about the openssl-users mailing list