{"record":{"id":"a03dc63a973219be","repo":"portainer/portainer","slug":"error-decrypting-file-w","errorCode":null,"errorMessage":"error decrypting file: %w","messagePattern":"error decrypting file: %w","errorType":"error_code","errorClass":null,"httpStatus":null,"severity":"error","filePath":"api/crypto/aes.go","lineNumber":79,"sourceCode":"\treturn aesDecrypt(input, passphrase, fips.FIPSMode())\n}\n\nfunc aesDecrypt(input io.Reader, passphrase []byte, fipsMode bool) (io.Reader, error) {\n\t// Read file header to determine how it was encrypted\n\tinputReader := bufio.NewReader(input)\n\theader, err := inputReader.Peek(len(aesGcmFIPSHeader))\n\tif err != nil {\n\t\treturn nil, fmt.Errorf(\"error reading encrypted backup file header: %w\", err)\n\t}\n\n\tif strings.HasPrefix(string(header), aesGcmFIPSHeader) {\n\t\tif !fipsMode {\n\t\t\treturn nil, errors.New(\"fips encrypted file detected but fips mode is not enabled\")\n\t\t}\n\n\t\treader, err := aesDecryptGCMFIPS(inputReader, passphrase)\n\t\tif err != nil {\n\t\t\treturn nil, fmt.Errorf(\"error decrypting file: %w\", err)\n\t\t}\n\n\t\treturn reader, nil\n\t}\n\n\tif strings.HasPrefix(string(header), aesGcmHeader) {\n\t\tif fipsMode {\n\t\t\treturn nil, errors.New(\"fips mode is enabled but non-fips encrypted file detected\")\n\t\t}\n\n\t\treader, err := aesDecryptGCM(inputReader, passphrase)\n\t\tif err != nil {\n\t\t\treturn nil, fmt.Errorf(\"error decrypting file: %w\", err)\n\t\t}\n\n\t\treturn reader, nil\n\t}\n","sourceCodeStart":61,"sourceCodeEnd":97,"githubUrl":"https://github.com/portainer/portainer/blob/17e74456ff6e794b9d5439ec3fa06922aa18a3f8/api/crypto/aes.go#L61-L97","documentation":"Error \"error decrypting file: %w\" thrown in portainer/portainer.","triggerScenarios":"Thrown at api/crypto/aes.go:79 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"17e74456ff6e794b9d5439ec3fa06922aa18a3f8","analyzedAt":"2026-08-26T23:09:01.915Z","schemaVersion":2},"datasetVersion":"2026-08-27T03:17:27.898Z"}