diff --git a/src/main/java/com/wolfssl/provider/jce/WolfCryptRSAKeyFactory.java b/src/main/java/com/wolfssl/provider/jce/WolfCryptRSAKeyFactory.java
index e2a1d5e9..74a8854e 100644
--- a/src/main/java/com/wolfssl/provider/jce/WolfCryptRSAKeyFactory.java
+++ b/src/main/java/com/wolfssl/provider/jce/WolfCryptRSAKeyFactory.java
@@ -378,6 +378,9 @@ public class WolfCryptRSAKeyFactory extends KeyFactorySpi {
             if (rsa != null) {
                 rsa.releaseNativeStruct();
             }
+            if (pkcs8Der != null) {
+                Arrays.fill(pkcs8Der, (byte)0);
+            }
         }
     }