From 3bf035d68af2a5556e3b4049637c4b471bd0d804 Mon Sep 17 00:00:00 2001
From: Pol Henarejos <pol.henarejos@cttc.es>
Date: Sat, 27 Dec 2025 22:02:58 +0100
Subject: [PATCH] Zeroize pkey

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
---
 src/fs/otp.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/fs/otp.c b/src/fs/otp.c
index 06e9387..f31704d 100644
--- a/src/fs/otp.c
+++ b/src/fs/otp.c
@@ -327,6 +327,7 @@ void init_otp_files() {
         if (ret != 0) {
             printf("Error writing OTP key 2 [%d]\n", ret);
         }
+        mbedtls_platform_zeroize(pkey, sizeof(pkey));
 #ifdef PICO_RP2350
         otp_chaff(OTP_KEY_2, 32);
 #endif