From 26d107b856e9462eb2f4dcc4d80025feddaab265 Mon Sep 17 00:00:00 2001
From: Daniel Huigens <d.huigens@protonmail.com>
Date: Fri, 24 Jan 2020 16:48:40 +0100
Subject: [PATCH] Zero out private key parameters in clearPrivateParams

---
 src/packet/secret_key.js | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/packet/secret_key.js b/src/packet/secret_key.js
index 263f185b..785dc48a 100644
--- a/src/packet/secret_key.js
+++ b/src/packet/secret_key.js
@@ -388,7 +388,11 @@ SecretKey.prototype.clearPrivateParams = function () {
   }
 
   const algo = enums.write(enums.publicKey, this.algorithm);
-  this.params = this.params.slice(0, crypto.getPubKeyParamTypes(algo).length);
+  const publicParamCount = crypto.getPubKeyParamTypes(algo).length;
+  this.params.slice(publicParamCount).forEach(param => {
+    param.data.fill(0);
+  });
+  this.params.length = publicParamCount;
   this.isEncrypted = true;
 };