The wrong size was used in the final memset()'s of various combine_key temporary variables. Pointed out by Ken Renard. To generate a diff of this commit: cvs diff -r5.2 -r5.3 krb5/src/lib/crypto/combine_keys.c