added extra erase to destroy copy of decrypted data.
@@ -297,6 +297,7 @@ public int getOutputBlockSize()
byte[] output = new byte[block.length - start];
System.arraycopy(block, start, output, 0, output.length);
+ Arrays.fill(block, (byte)0);
return output;
}
