From 8b5b86e13c7610d20bc6753f0074e4b58805d3f8 Mon Sep 17 00:00:00 2001 From: Miguel Oliveira Date: Fri, 9 Jun 2023 15:28:42 -0300 Subject: [PATCH] Fix PBKDF2 password padding --- ccryptolib/sha256.lua | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/ccryptolib/sha256.lua b/ccryptolib/sha256.lua index 8c54970..e8c7ac4 100644 --- a/ccryptolib/sha256.lua +++ b/ccryptolib/sha256.lua @@ -109,8 +109,7 @@ local function pbkdf2(password, salt, iter) -- Pad password. if #password > 64 then password = digest(password) end - password = password .. ("\0"):rep(-#password % 64) - password = {u16x4(fmt16x4, password, 1)} + password = {u16x4(fmt16x4, password .. ("\0"):rep(64), 1)} -- Compute password blocks. local ikp = {}