Use io.ReadFull

k0dia · Jul 10, 2021 · 3282b0f · 3282b0f
1 parent 544f6d1
commit 3282b0f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/vault/kmsgcp.go b/vault/kmsgcp.go
@@ -130,7 +130,7 @@ func (k *KMSGCPManager) setupEncryption() error {
 		return nil
 	}
 
-	_, err := rand.Read(k.localDEK[:])
+	_, err := io.ReadFull(rand.Reader, k.localDEK[:])
 	if err != nil {
 		return err
 	}

diff --git a/vault/passphrase.go b/vault/passphrase.go
@@ -44,7 +44,7 @@ func (b *PassphraseBoxer) Seal(in []byte) (string, error) {
 	}
 
 	salt := make([]byte, saltLength)
-	if _, err := crypto_rand.Read(salt); err != nil {
+	if _, err := io.ReadFull(crypto_rand.Reader, salt); err != nil {
 		return "", err
 	}
 	secretKey := deriveKey(b.passphrase, salt)