When I was developing my new feature, I found something very disturbing. I wrote a test for decoding messages with wrong keys. To be more specific, I replaced the key first char with some other chars (a, b, and so on). I expected bad decrypt error to be raised, obviously. And… my test failed! Not only was nothing raised, but after a quick inspection I discovered that my message was properly decoded:
