From b762cbeeb860395ba52cca4d7dfd2576fe2a180b Mon Sep 17 00:00:00 2001
From: phrwlk <phrwlk7@gmail.com>
Date: Mon, 3 Nov 2025 12:12:55 +0200
Subject: [PATCH] accounts/keystore: zeroize decrypted key in Update() after
 use

---
 accounts/keystore/keystore.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/accounts/keystore/keystore.go b/accounts/keystore/keystore.go
index 3e4266924f..6d2102b689 100644
--- a/accounts/keystore/keystore.go
+++ b/accounts/keystore/keystore.go
@@ -477,6 +477,7 @@ func (ks *KeyStore) Update(a accounts.Account, passphrase, newPassphrase string)
 	if err != nil {
 		return err
 	}
+	defer zeroKey(key.PrivateKey)
 	return ks.storage.StoreKey(a.URL.Path, key, newPassphrase)
 }