diff --git a/src/dtls13.c b/src/dtls13.c
index d4f8b9b1e..91eb2b20d 100644
--- a/src/dtls13.c
+++ b/src/dtls13.c
@@ -1959,6 +1959,9 @@ int Dtls13DeriveSnKeys(WOLFSSL* ssl, int provision)
 
 end:
     ForceZero(key_dig, MAX_PRF_DIG);
+#ifdef WOLFSSL_CHECK_MEM_ZERO
+    wc_MemZero_Check(key_dig, sizeof(key_dig));
+#endif
     return ret;
 }