diff --git a/boot/bootutil/src/loader.c b/boot/bootutil/src/loader.c
index 6dee299..8f143a0 100644
--- a/boot/bootutil/src/loader.c
+++ b/boot/bootutil/src/loader.c
@@ -1657,6 +1657,13 @@
     BOOT_CURR_IMG(state) = 0;
 #endif
 
+    /*
+     * Since the boot_status struct stores plaintext encryption keys, reset
+     * them here to avoid the possibility of jumping into an image that could
+     * easily recover them.
+     */
+    memset(&bs, 0, sizeof(struct boot_status));
+
     rsp->br_flash_dev_id = BOOT_IMG_AREA(state, BOOT_PRIMARY_SLOT)->fa_device_id;
     rsp->br_image_off = boot_img_slot_off(state, BOOT_PRIMARY_SLOT);
     rsp->br_hdr = boot_img_hdr(state, BOOT_PRIMARY_SLOT);