From 06d601482cf5ea49c84c29a1c081e29169d04ece Mon Sep 17 00:00:00 2001
From: Vassiliy Yegorov <va@egorovanet.ru>
Date: Wed, 1 Jul 2026 16:36:19 +0700
Subject: [PATCH] fix(crypto): enforce 32-byte key for AES-256

---
 internal/crypto/crypto.go      | 3 +++
 internal/crypto/crypto_test.go | 6 ++++++
 2 files changed, 9 insertions(+)

diff --git a/internal/crypto/crypto.go b/internal/crypto/crypto.go
index 789bbe8..0adf923 100644
--- a/internal/crypto/crypto.go
+++ b/internal/crypto/crypto.go
@@ -39,6 +39,9 @@ func Decrypt(key []byte, enc string) ([]byte, error) {
 }
 
 func newGCM(key []byte) (cipher.AEAD, error) {
+	if len(key) != 32 {
+		return nil, errors.New("key must be 32 bytes (AES-256)")
+	}
 	block, err := aes.NewCipher(key)
 	if err != nil {
 		return nil, err
diff --git a/internal/crypto/crypto_test.go b/internal/crypto/crypto_test.go
index f94a6e4..ca95e75 100644
--- a/internal/crypto/crypto_test.go
+++ b/internal/crypto/crypto_test.go
@@ -31,3 +31,9 @@ func TestEncryptNonDeterministic(t *testing.T) {
 		t.Fatal("two encryptions must differ (random nonce)")
 	}
 }
+
+func TestEncryptRejectsWrongKeySize(t *testing.T) {
+	if _, err := Encrypt(make([]byte, 16), []byte("x")); err == nil {
+		t.Fatal("16-byte key must be rejected (AES-256 requires 32)")
+	}
+}