From bae336d63343372ae0ebeffdf0a7cd95a196d1a6 Mon Sep 17 00:00:00 2001
From: Karolin Varner <karo@cupdev.net>
Date: Sat, 2 Aug 2025 18:36:50 +0200
Subject: [PATCH] fix(rp): Make sure that the WG SK is erased ASAP

---
 rp/src/exchange.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rp/src/exchange.rs b/rp/src/exchange.rs
index 2eaef5c6..3706a5f2 100644
--- a/rp/src/exchange.rs
+++ b/rp/src/exchange.rs
@@ -443,6 +443,7 @@ pub async fn exchange(options: ExchangeOptions) -> Result<()> {
     device
         .set_private_key_and_listen_addr(&wgsk, options.listen.map(|ip| ip.port() + 1))
         .await?;
+    std::mem::drop(wgsk);
 
     // Assign the public IP address for the interface
     if let Some(ref ip) = options.ip {