diff --git a/ChangeLog b/ChangeLog
index 6fe635d..da8f277 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,7 @@
 2012-06-15  Niibe Yutaka  <gniibe@fsij.org>
 
+	* src/random.c (random_bytes_free): Clear out random bytes.
+
 	More protection improvements.
 	* src/random.c (RANDOM_BYTES_LENGTH): It's 32 now (was: 16).
 	* src/gnuk.h (struct key_data_internal): Remove check, random,
diff --git a/src/random.c b/src/random.c
index 200d471..e52d785 100644
--- a/src/random.c
+++ b/src/random.c
@@ -58,7 +58,7 @@ random_bytes_get (void)
 void
 random_bytes_free (const uint8_t *p)
 {
-  (void)p;
+  memset (p, 0, RANDOM_BYTES_LENGTH);
   neug_flush ();
 }