diff --git a/library/entropy.c b/library/entropy.c
index e6da98b10..90d09ebb1 100644
--- a/library/entropy.c
+++ b/library/entropy.c
@@ -195,6 +195,8 @@ static int entropy_update( mbedtls_entropy_context *ctx, unsigned char source_id
     mbedtls_sha256_update( &ctx->accumulator, p, use_len );
 #endif
 
+    mbedtls_zeroize( tmp, sizeof( tmp ) );
+
     return( 0 );
 }