Accept encryption payloads with no wrapped payloads

diff --git a/src/libcharon/encoding/payloads/encryption_payload.c b/src/libcharon/encoding/payloads/encryption_payload.c
index 05e1d0e55a52d5fffcff1b1daf987426ec1263bc..476f88ec7bfc7c2762e4581a72a5f79d70d5ffc0 100644 (file)
--- a/src/libcharon/encoding/payloads/encryption_payload.c
+++ b/src/libcharon/encoding/payloads/encryption_payload.c
@@ -423,7 +423,7 @@ METHOD(encryption_payload_t, decrypt, bool,
 
        plain = chunk_create(crypt.ptr, crypt.len - icv.len);
        padding.len = plain.ptr[plain.len - 1] + 1;
-       if (padding.len >= plain.len)
+       if (padding.len > plain.len)
        {
                DBG1(DBG_ENC, "decrypting encryption payload failed, "
                         "padding invalid %B", &crypt);