noise: store clamped key instead of raw key

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>

1 files changed, 1 insertions, 0 deletions

diff --git a/src/noise.c b/src/noise.c
index e1d4519..4405125 100644
--- a/src/noise.c
+++ b/src/noise.c
@@ -285,6 +285,7 @@ void wg_noise_set_static_identity_private_key(
 {
 	memcpy(static_identity->static_private, private_key,
 	       NOISE_PUBLIC_KEY_LEN);
+	curve25519_clamp_secret(static_identity->static_private);
 	static_identity->has_identity = curve25519_generate_public(
 		static_identity->static_public, private_key);
 }