crypto: Mac then decrypt in the PkDecryption compat module

This commit is contained in:
Damir Jelić
2024-03-19 18:55:44 +01:00
parent b2dc21d7d0
commit 44443d3b46

View File

@@ -106,12 +106,12 @@ impl PkDecryption {
let keys = Keys::new(shared_secret);
let cipher = Aes256CbcDec::new(keys.aes_key(), keys.iv());
let decrypted = cipher.decrypt_padded_vec_mut::<Pkcs7>(&message.ciphertext)?;
let hmac = keys.hmac();
hmac.verify_truncated_left(&message.mac)?;
let cipher = Aes256CbcDec::new(keys.aes_key(), keys.iv());
let decrypted = cipher.decrypt_padded_vec_mut::<Pkcs7>(&message.ciphertext)?;
Ok(decrypted)
}