diff --git a/library/pkcs5.c b/library/pkcs5.c
index 8a80aa5..69b85de 100644
--- a/library/pkcs5.c
+++ b/library/pkcs5.c
@@ -312,6 +312,10 @@
                 break;
     }
 
+    /* Zeroise buffers to clear sensitive data from memory. */
+    mbedtls_platform_zeroize( work, MBEDTLS_MD_MAX_SIZE );
+    mbedtls_platform_zeroize( md1, MBEDTLS_MD_MAX_SIZE );
+
     return( 0 );
 }