===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/ssh/ssh-keygen.c,v
retrieving revision 1.32.2.5
retrieving revision 1.32.2.6
diff -u -r1.32.2.5 -r1.32.2.6
--- src/usr.bin/ssh/ssh-keygen.c	2001/09/27 00:15:42	1.32.2.5
+++ src/usr.bin/ssh/ssh-keygen.c	2001/11/15 00:15:00	1.32.2.6
@@ -12,7 +12,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: ssh-keygen.c,v 1.32.2.5 2001/09/27 00:15:42 miod Exp $");
+RCSID("$OpenBSD: ssh-keygen.c,v 1.32.2.6 2001/11/15 00:15:00 miod Exp $");
 
 #include <openssl/evp.h>
 #include <openssl/pem.h>
@@ -491,6 +491,14 @@
 	status = 0;
 	log("loading key done");
 done:
+
+	memset(elements[0], '\0', BN_num_bytes(prv->rsa->q));
+	memset(elements[1], '\0', BN_num_bytes(prv->rsa->p));
+	memset(elements[2], '\0', BN_num_bytes(prv->rsa->iqmp));
+	memset(elements[3], '\0', BN_num_bytes(prv->rsa->dmq1));
+	memset(elements[4], '\0', BN_num_bytes(prv->rsa->dmp1));
+	memset(elements[5], '\0', BN_num_bytes(prv->rsa->n));
+
 	if (prv)
 		key_free(prv);
 	for (i = 0; i < NUM_RSA_KEY_ELEMENTS; i++)