Reset `prf` on incomplete request

diff --git a/src/getPrf.js b/src/getPrf.js
index caa5257b2164ab785e00abb3145298d16b32c6ae..264fe3cf07627a1f943e31b55377737ffcbd761a 100644 (file)
--- a/src/getPrf.js
+++ b/src/getPrf.js
@@ -153,6 +153,7 @@ export async function getPrf(options = {}) {
       });
       request.on('end', () => {
         if (offset !== 32) { // Not all 32 PRF bytes were from passkey
+          prf.fill(0);
           response.writeHead(400).end();
           return;
         }