From ebeebe017955415199e6359784225f70252e80aa Mon Sep 17 00:00:00 2001 From: riccardom Date: Wed, 21 Oct 2026 08:44:13 +0200 Subject: [PATCH] [client] pqkem: drop the previous PSKs on Stop They are WireGuard key material like the current ones, which Stop already clears, and nothing reads them after shutdown. --- client/internal/pqkem/manager.go | 1 + 1 file changed, 1 insertion(+) diff --git a/client/internal/pqkem/manager.go b/client/internal/pqkem/manager.go index caa80bfab..fdfa856a0 100644 --- a/client/internal/pqkem/manager.go +++ b/client/internal/pqkem/manager.go @@ -335,6 +335,7 @@ func (m *Manager) Stop() { m.mu.Lock() m.exchanges = make(map[RemoteID]*exchangeCtl) m.psks = make(map[RemoteID]PSK) + m.prevPSKs = make(map[RemoteID]PSK) m.mu.Unlock() }