no point to fail on 3DES weak keys.

diff --git a/lib/nettle/cipher.c b/lib/nettle/cipher.c
index 1a90b309d163bce918f5f88f8db6c033f5d00e6d..1bc164960b8d8a610a7390a5b75934e58b17ceb0 100644 (file)
--- a/lib/nettle/cipher.c
+++ b/lib/nettle/cipher.c
@@ -324,10 +324,8 @@ wrap_nettle_cipher_setkey(void *_ctx, const void *key, size_t keysize)
 
                des_fix_parity(keysize, des_key, key);
 
-               /* this fails on weak keys */
                if (des3_set_key(ctx->ctx_ptr, des_key) != 1) {
                        gnutls_assert();
-                       return GNUTLS_E_INTERNAL_ERROR;
                }
                zeroize_temp_key(des_key, sizeof(des_key));