diff --git a/src/libstrongswan/plugins/sha3/sha3_keccak.c b/src/libstrongswan/plugins/sha3/sha3_keccak.c
index 57f6885c56..e56df01105 100644
--- a/src/libstrongswan/plugins/sha3/sha3_keccak.c
+++ b/src/libstrongswan/plugins/sha3/sha3_keccak.c
@@ -462,6 +462,7 @@ METHOD(sha3_keccak_t, squeeze, void,
 METHOD(sha3_keccak_t, destroy, void,
 	private_sha3_keccak_t *this)
 {
+	memwipe(this->state, sizeof(this->state));
 	free(this);
 }