We should also delete the underlying persistent public key...

net/base/keygen_handler_win.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/keygen_handler.h"
 
 #include <windows.h>
 #include <wincrypt.h>
 #pragma comment(lib, "crypt32.lib")
 #include <rpc.h>
@@ skipping 67 matching lines @@
 
   return true;
 }
 
 // Appends a DER IA5String containing |challenge| to |output|.
 // Returns true if encoding was successful.
 bool EncodeChallenge(const std::string& challenge, std::vector<BYTE>* output) {
   CERT_NAME_VALUE challenge_nv;
   challenge_nv.dwValueType = CERT_RDN_IA5_STRING;
   challenge_nv.Value.pbData = const_cast<BYTE*>(
-      reinterpret_cast<const BYTE*>(challenge.c_str()));
+      reinterpret_cast<const BYTE*>(challenge.data()));
   challenge_nv.Value.cbData = challenge.size();
 
   return EncodeAndAppendType(X509_ANY_STRING, &challenge_nv, output);
 }
 
 // Appends a DER SubjectPublicKeyInfo structure for the signing key in |prov|
 // to |output|.
 // Returns true if encoding was successful.
 bool EncodeSubjectPublicKeyInfo(HCRYPTPROV prov, std::vector<BYTE>* output) {
   BOOL ok;
@@ skipping 260 matching lines @@
       // Fully destroys any of the keys that were created and releases prov.
       CryptAcquireContext(&prov, new_key_id.c_str(), NULL, PROV_RSA_FULL,
                           CRYPT_SILENT | CRYPT_DELETEKEYSET);
     }
   }
 
   return result;
 }
 
 }  // namespace net