unconditionally zeroize temporal keys.

diff --git a/lib/gnutls_mem.h b/lib/gnutls_mem.h
index edf78b9c282ac1c3bc314db14da2907185c83f2b..2dc4200a35511e21ebe834053f51a108dfaf05ca 100644 (file)
--- a/lib/gnutls_mem.h
+++ b/lib/gnutls_mem.h
@@ -46,12 +46,7 @@ void _gnutls_bzero(void *v, size_t n);
 
 #define zeroize_key(x, size) _gnutls_bzero(x, size)
 
-#ifdef ENABLE_FIPS140
-# define zeroize_temp_key zeroize_key
-# define zrelease_temp_mpi_key zrelease_mpi_key
-#else
-# define zeroize_temp_key(x, size)
-# define zrelease_temp_mpi_key(mpi) _gnutls_mpi_release(mpi)
-#endif
+#define zeroize_temp_key zeroize_key
+#define zrelease_temp_mpi_key zrelease_mpi_key
 
 #endif                         /* GNUTLS_MEM_H */