Merge commit from fork

Destroy key handle when exiting cng.TLS1PRF
microsoft · Feb 11, 2025 · f49c8e1 · f49c8e1
2 parents 50d2dfa + 18327f1
commit f49c8e1
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/cng/tls1prf.go b/cng/tls1prf.go
@@ -44,6 +44,7 @@ func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
 	if err := bcrypt.GenerateSymmetricKey(alg, &kh, nil, secret, 0); err != nil {
 		return err
 	}
+	defer bcrypt.DestroyKey(kh)
 
 	buffers := make([]bcrypt.Buffer, 0, 3)
 	if len(label) > 0 {