clear remaining ECH state even when HRR is used
diff --git a/lib/picotls.c b/lib/picotls.c
index eceb175..dbd087c 100644
--- a/lib/picotls.c
+++ b/lib/picotls.c
@@ -2699,9 +2699,10 @@
     if (tls->ech.aead != NULL) {
         if ((ret = client_ech_select_hello(tls, message, confirm_hash_off, ECH_CONFIRMATION_SERVER_HELLO)) != 0)
             goto Exit;
-        clear_ech(&tls->ech, 0);
     }
 
+    clear_ech(&tls->ech, 0);
+
     ptls__key_schedule_update_hash(tls->key_schedule, message.base, message.len, 0);
 
     if (sh.peerkey.base != NULL) {