Copy the salt before returning it

cloudflare · Mar 1, 2022 · 2428169 · 2428169
1 parent cbf32f3
commit 2428169
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/blindsign/blindrsa/blindrsa.go b/blindsign/blindrsa/blindrsa.go
@@ -192,7 +192,9 @@ func (state RSAVerifierState) CopyBlind() []byte {
 
 // CopySalt returns an encoding of the per-message salt used in the protocol.
 func (state RSAVerifierState) CopySalt() []byte {
-	return state.salt
+	salt := make([]byte, len(state.salt))
+	copy(salt, state.salt)
+	return salt
 }
 
 // An RSASigner represents the Signer in the blind RSA protocol.