diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index 203b6de..72ecdde 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -5343,6 +5343,8 @@
         status = PSA_ERROR_CORRUPTION_DETECTED;
 
 exit:
+    if( status != PSA_SUCCESS )
+        mbedtls_platform_zeroize( shared_secret, shared_secret_size );
     mbedtls_ecdh_free( &ecdh );
     mbedtls_ecp_keypair_free( their_key );
     mbedtls_free( their_key );