openpgp: Improve protection of unencrypted key material.

1 files changed, 2 insertions, 1 deletions

diff --git a/openpgp/src/serialize/mod.rs b/openpgp/src/serialize/mod.rs
index 8a857335..6799c558 100644
--- a/openpgp/src/serialize/mod.rs
+++ b/openpgp/src/serialize/mod.rs
@@ -1428,8 +1428,9 @@ impl<P, R> Key4<P, R>
                     write_byte(o, 0)?;
 
                     // To compute the checksum, serialize to a buffer first.
-                    let mut buf = Vec::new(); // XXX: Protect this vec.
+                    let mut buf = Vec::new();
                     mpis.serialize(&mut buf)?;
+                    let buf: crate::crypto::mem::Protected = buf.into();
                     let checksum: usize = buf.iter().map(|x| *x as usize)
                         .sum();