diff options
| author | Levi Durfee <levi.durfee@gmail.com> | 2026-01-07 11:56:45 -0500 |
|---|---|---|
| committer | Levi Durfee <levi.durfee@gmail.com> | 2026-01-07 11:56:52 -0500 |
| commit | fe005e606aba487736fb80f2f4c1c67e05c8b5b3 (patch) | |
| tree | 85a4f6c87e7fd724274039002c26c404f287fdca /internal/decrypt.go | |
| parent | ac5b030f71434123bea60f9b1d918a59f19fed6a (diff) | |
Use a unique salt for each encryption and save it
with the encrypted payload.
Diffstat (limited to 'internal/decrypt.go')
| -rw-r--r-- | internal/decrypt.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/internal/decrypt.go b/internal/decrypt.go index 470e3c5..936ef59 100644 --- a/internal/decrypt.go +++ b/internal/decrypt.go @@ -1,7 +1,7 @@ package internal func Decrypt(edek WrappedDEK, ct Ciphertext, salt Salt) ([]byte, error) { - kek, err := NewKEKFromEnvB64("GOAES_PASSPHRASE") + kek, err := NewKEKFromEnvB64("GOAES_PASSPHRASE", salt) if err != nil { return nil, err } |