Fixed ESP padding in decryption

secdev · Feb 4, 2024 · 03bb705 · 03bb705
1 parent 9857163
commit 03bb705
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/scapy/layers/ipsec.py b/scapy/layers/ipsec.py
@@ -492,8 +492,8 @@ def decrypt(self, sa, esp, key, icv_size=None, esn_en=False, esn=0):
         nh = orb(data[-1])
 
         # then use padlen to determine data and padding
-        data = data[:len(data) - padlen - 2]
         padding = data[len(data) - padlen - 2: len(data) - 2]
+        data = data[:len(data) - padlen - 2]
 
         return _ESPPlain(spi=esp.spi,
                          seq=esp.seq,