BUG: Truncation of CBC padding was wrong

Resulting in wrong decryption for large secrets. Whoops.
alexzorin · Jul 14, 2019 · 6786069 · 6786069
1 parent 5e6fdc9
commit 6786069
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/crypto.go b/crypto.go
@@ -102,7 +102,8 @@ func decryptToken(encryptedSeedB64, salt, passphrase string) (string, error) {
 
 	out := make([]byte, len(encryptedSeed))
 	cbc.CryptBlocks(out, encryptedSeed)
-	out = out[:16]
+
+	out = out[:len(out)-cbc.BlockSize()]
 
 	return hex.EncodeToString(out), nil
 }