diff --git a/lib/hdb/keys.c b/lib/hdb/keys.c
index c2f74dd85..748e1ba0a 100644
--- a/lib/hdb/keys.c
+++ b/lib/hdb/keys.c
@@ -218,7 +218,7 @@ add_enctype_to_key_set(Key **key_set, size_t *nkeyset,
     key.key.keyvalue.data = NULL;
 
     if (salt) {
-	key.salt = malloc(sizeof(*key.salt));
+	key.salt = calloc(1, sizeof(*key.salt));
 	if (key.salt == NULL) {
 	    free_Key(&key);
 	    return ENOMEM;