diff --git a/src/password_323.c b/src/password_323.c
index de4548c..a6a8e01 100644
--- a/src/password_323.c
+++ b/src/password_323.c
@@ -137,12 +137,12 @@ void make_scrambled_password(char scrambled_password[42], const char password[25
   SHA1Init(&ctx);
   SHA1Update(&ctx, h0, sizeof h0);
 #ifdef HAVE_EXPLICIT_BZERO
-  explicit_bzero(h0, strlen(password));
+  explicit_bzero(h0, sizeof h0);
 #else
   volatile char *pnt_ = (volatile char *) h0;
   size_t i = (size_t) 0U;
 
-  while (i < strlen(password)) {
+  while (i < sizeof h0) {
     pnt_[i++] = 0U;
   }
 #endif