diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c
index 90d782009..d4d92361d 100644
--- a/kdc/krb5tgs.c
+++ b/kdc/krb5tgs.c
@@ -2423,6 +2423,10 @@ out:
     free(csec);
     free(cusec);
 
+    if (r->armor_crypto) {
+	krb5_crypto_destroy(r->context, r->armor_crypto);
+	r->armor_crypto = NULL;
+    }
     krb5_free_keyblock_contents(r->context, &r->reply_key);
     krb5_free_keyblock_contents(r->context, &r->strengthen_key);