From 488d987fc4ea0d3ad66423430b85e0b043fb36d5 Mon Sep 17 00:00:00 2001
From: phrwlk <phrwlk7@gmail.com>
Date: Thu, 13 Nov 2025 10:17:54 +0200
Subject: [PATCH] accounts/keystore: clear decrypted key after use (#33090)

---
 accounts/keystore/keystore.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/accounts/keystore/keystore.go b/accounts/keystore/keystore.go
index 3e4266924f..29c4bdf2ca 100644
--- a/accounts/keystore/keystore.go
+++ b/accounts/keystore/keystore.go
@@ -418,6 +418,7 @@ func (ks *KeyStore) Export(a accounts.Account, passphrase, newPassphrase string)
 	if err != nil {
 		return nil, err
 	}
+	defer zeroKey(key.PrivateKey)
 	var N, P int
 	if store, ok := ks.storage.(*keyStorePassphrase); ok {
 		N, P = store.scryptN, store.scryptP
@@ -477,6 +478,7 @@ func (ks *KeyStore) Update(a accounts.Account, passphrase, newPassphrase string)
 	if err != nil {
 		return err
 	}
+	defer zeroKey(key.PrivateKey)
 	return ks.storage.StoreKey(a.URL.Path, key, newPassphrase)
 }