diff --git a/src/libsodium/crypto_kem/xwing/kem_xwing.c b/src/libsodium/crypto_kem/xwing/kem_xwing.c
index 0721ccf4..b32353f6 100644
--- a/src/libsodium/crypto_kem/xwing/kem_xwing.c
+++ b/src/libsodium/crypto_kem/xwing/kem_xwing.c
@@ -50,6 +50,7 @@ combiner(unsigned char       ss[crypto_kem_xwing_SHAREDSECRETBYTES],
     crypto_hash_sha3256_update(&state, pk_x25519, crypto_scalarmult_curve25519_BYTES);
     crypto_hash_sha3256_update(&state, xwing_label, sizeof xwing_label);
     crypto_hash_sha3256_final(&state, ss);
+    sodium_memzero(&state, sizeof state);
 }
 
 size_t