From 22ce0770a047b44c8168ec1ccd21b7771903ff42 Mon Sep 17 00:00:00 2001
From: Levi Durfee <levi.durfee@gmail.com>
Date: Wed, 7 Jan 2026 08:57:35 -0500
Subject: Add pbkdf2 with salt

---
 internal/decrypt.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'internal/decrypt.go')

diff --git a/internal/decrypt.go b/internal/decrypt.go
index d8d9ef4..bc2e64b 100644
--- a/internal/decrypt.go
+++ b/internal/decrypt.go
@@ -7,7 +7,7 @@ import (
 func Decrypt(edek WrappedDEK, ct Ciphertext) ([]byte, error) {
 	godotenv.Load()
 
-	kek, err := NewKEKFromEnvB64("SECRET_KEY")
+	kek, err := NewKEKFromEnvB64("GOAES_PASSPHRASE", "GOAES_SALT")
 	if err != nil {
 		return nil, err
 	}
-- 
cgit v1.2.3