From 643427040bb405cd74e634b6788e0866c281b89e Mon Sep 17 00:00:00 2001
From: Juliusz Sosinowicz <juliusz@wolfssl.com>
Date: Mon, 16 Mar 2026 15:44:09 +0100
Subject: [PATCH] Clear seed buffer after dilithium key generation

F-767
---
 wolfcrypt/src/dilithium.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/wolfcrypt/src/dilithium.c b/wolfcrypt/src/dilithium.c
index a53de82883..f5b25d2258 100644
--- a/wolfcrypt/src/dilithium.c
+++ b/wolfcrypt/src/dilithium.c
@@ -8026,6 +8026,7 @@ static int dilithium_make_key(dilithium_key* key, WC_RNG* rng)
         ret = wc_dilithium_make_key_from_seed(key, seed);
     }
 
+    ForceZero(seed, sizeof(seed));
     return ret;
 }
 #endif /* !WOLFSSL_DILITHIUM_NO_MAKE_KEY */