diff --git a/src/main/java/com/wolfssl/provider/jce/WolfCryptKeyAgreement.java b/src/main/java/com/wolfssl/provider/jce/WolfCryptKeyAgreement.java
index 29bb8746..c3dcca62 100644
--- a/src/main/java/com/wolfssl/provider/jce/WolfCryptKeyAgreement.java
+++ b/src/main/java/com/wolfssl/provider/jce/WolfCryptKeyAgreement.java
@@ -227,10 +227,12 @@ public class WolfCryptKeyAgreement extends KeyAgreementSpi {
              * running on a Java version later than Java 8.
              */
             if (this.type == KeyAgreeType.WC_DH) {
+                zeroArray(tmp);
                 tmp = new byte[this.primeLen];
                 Arrays.fill(tmp, (byte)0);
                 System.arraycopy(secret, 0, tmp,
                     tmp.length - secret.length, secret.length);
+                zeroArray(secret);
                 secret = tmp.clone();
             }