From 14a811b6af4e2eb388cc54383430a3649a2ad1e2 Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 29 Jun 2026 15:32:05 +0200
Subject: [PATCH] curve25519: Explicitly wipe shared secret when destroying DH
 object

---
 src/libstrongswan/plugins/curve25519/curve25519_dh.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/libstrongswan/plugins/curve25519/curve25519_dh.c b/src/libstrongswan/plugins/curve25519/curve25519_dh.c
index 85213b7a6..4af701eb0 100644
--- a/src/libstrongswan/plugins/curve25519/curve25519_dh.c
+++ b/src/libstrongswan/plugins/curve25519/curve25519_dh.c
@@ -147,6 +147,7 @@ METHOD(key_exchange_t, destroy, void,
 	private_curve25519_dh_t *this)
 {
 	this->drv->destroy(this->drv);
+	memwipe(this->shared, sizeof(this->shared));
 	free(this);
 }