diff --git a/library/psa_crypto_driver_wrappers.c b/library/psa_crypto_driver_wrappers.c
index 1dd3b2db92..5e7eb11ccf 100644
--- a/library/psa_crypto_driver_wrappers.c
+++ b/library/psa_crypto_driver_wrappers.c
@@ -1760,6 +1760,8 @@ psa_status_t psa_driver_wrapper_aead_verify(
                         status = PSA_ERROR_INVALID_SIGNATURE;
                 }
 
+                mbedtls_platform_zeroize( check_tag, sizeof( check_tag ) );
+
                 return( status );
             }