I run xmlsec utility for signature/verification/encryption/decryption with RSA keys and certificates under purify and I see no leaks. Can you describe what exactly are you doing, please? Aleksey