AESProvider Decrypt method does not check string length before substring method invoked

[hoeyi]

Summary

The Decrypt(string, string) method is responsible for extracting the cipher text and iv from the given text and decrypting the cipher text. This is done by taking a substring from the given text, which is not checked for length before attempting. This may be causing issues when a value is undefined.

Desired Solution

Evaluate method for better handling of cases where the input string is not long enough to have the expected cipher and iv components.

Extensions.Configuration/Extensions.Configuration/Cryptography/AESProvider.cs

Line 79 in e30031d

public static string Decrypt(string cipherTextWithIV, string aesKey)