schnorrsig: clear out masked secret key in BIP-340 nonce function

bitcoin-core · Jan 29, 2025 · a82287f · a82287f
1 parent f79f46c
commit a82287f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/modules/schnorrsig/main_impl.h b/src/modules/schnorrsig/main_impl.h
@@ -94,6 +94,8 @@ static int nonce_function_bip340(unsigned char *nonce32, const unsigned char *ms
     secp256k1_sha256_write(&sha, msg, msglen);
     secp256k1_sha256_finalize(&sha, nonce32);
     secp256k1_sha256_clear(&sha);
+    secp256k1_memclear(masked_key, sizeof(masked_key));
+
     return 1;
 }