Re: libnettle/libhogweed WIP

[Ted Zlatanov]

On Mon, 17 Apr 2017 17:19:07 -0400 Noam Postavsky <address@hidden> wrote: 

NP> On Mon, Apr 17, 2017 at 4:50 PM, Ted Zlatanov <address@hidden> wrote:
>> 
>> * IV, AUTH, and KEY parameters are still wiped if they were strings
>> originally.

NP> Is there any need to wipe IV and AUTH? Unless I've misunderstood,
NP> those are not expected to be secret anyway.

Yes, that was just mental inertia, thanks for catching it. I've removed
that. We don't want IVs to be reused for the same KEY, I'll work on that
as recommended in https://tools.ietf.org/html/rfc5116#section-3.2

Ted