From 7d301d935f526257a576c35e024b5a7f224a63d0 Mon Sep 17 00:00:00 2001
From: Mamone Tarsha <maamoun.tk@googlemail.com>
Date: Fri, 2 Jul 2021 23:49:43 +0300
Subject: [PATCH] [S390x] wipe hash subkey from stack once GHASH operation
 completed

---
 s390x/msa_x4/gcm-hash.asm | 1 +
 1 file changed, 1 insertion(+)

diff --git a/s390x/msa_x4/gcm-hash.asm b/s390x/msa_x4/gcm-hash.asm
index 73a50824..3bbc8a63 100644
--- a/s390x/msa_x4/gcm-hash.asm
+++ b/s390x/msa_x4/gcm-hash.asm
@@ -92,6 +92,7 @@ PROLOGUE(_nettle_gcm_hash)
     brc            1,3b                          C safely branch back in case of partial completion
 4:
     mvc            0(16,%r6),0(%r1)              C store x
+    xc             16(16,%r1),16(%r1)            C wipe hash subkey from stack
     FREE_STACK(PB_SIZE+16)
     lgdr           %r6,%f0                       C restore general register 6
     br             RA
-- 
GitLab