* md.c: Moved a couple of functions down below the data structure

definitions.
(struct gcry_md_context): New field ACTUAL_HANDLE_SIZE.
(md_open): Set it here.
(strcut gcry_md_list): New field ACTUAL_STRUCT_SIZE.
(md_enable): Set it here.
(md_close): Wipe the context memory.
secure memory.
* cipher.c (struct gcry_cipher_handle): New field ACTUAL_HANDLE_SIZE.
(gcry_cipher_open): Set it here.
(gcry_cipher_close): Use it to always wipe out the handle data.

* md.c: Minor code and comment cleanups.

1 files changed, 5 insertions, 0 deletions

diff --git a/TODO b/TODO
index 86fe1a82..65b79332 100644
--- a/TODO
+++ b/TODO
@@ -28,3 +28,8 @@ What's left to do                                 -*- outline -*-
 
 * HMAC won't work with sha-512 due to the different block size.  OTOH,
   I can imagine no cryptographic reason to use it.
+
+* cipher/pubkey.c and pubkey implementaions.
+  Don't rely on the secure memory based wiping fucntion but add an
+  extra wiping.
+