pbkdf2: change FIPS zeroization to use the OPENSSL_PEDANTIC_ZEROIZATI…

…ON define Reviewed-by: Richard Levitte <[email protected]> Reviewed-by: Tim Hudson <[email protected]> (Merged from openssl#26068)
AlexanderBeyn · Nov 28, 2024 · 8d09e61 · 8d09e61
1 parent db1d8c9
commit 8d09e61
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/providers/implementations/kdfs/pbkdf2.c b/providers/implementations/kdfs/pbkdf2.c
@@ -93,7 +93,7 @@ static void *kdf_pbkdf2_new(void *provctx)
 static void kdf_pbkdf2_cleanup(KDF_PBKDF2 *ctx)
 {
     ossl_prov_digest_reset(&ctx->digest);
-#ifdef FIPS_MODULE
+#ifdef OPENSSL_PEDANTIC_ZEROIZATION
     OPENSSL_clear_free(ctx->salt, ctx->salt_len);
 #else
     OPENSSL_free(ctx->salt);