From ba5308919918219a6d13de590acddea37eba0245 Mon Sep 17 00:00:00 2001
From: Kevin Lewi <klewi@fb.com>
Date: Thu, 7 Jan 2021 17:44:27 -0800
Subject: [PATCH] Fixing construct_aad() bug (#112)

---
 src/envelope.rs | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/src/envelope.rs b/src/envelope.rs
index ec75e16..f26a915 100644
--- a/src/envelope.rs
+++ b/src/envelope.rs
@@ -287,10 +287,11 @@ impl<D: Hash> Envelope<D> {
 // Helper functions
 
 fn construct_aad(server_s_pk: &[u8], optional_ids: &Option<(Vec<u8>, Vec<u8>)>) -> Vec<u8> {
-    optional_ids
+    let ids = optional_ids
         .iter()
-        .flat_map(|(l, r)| [serialize(server_s_pk, 2), serialize(l, 2), serialize(r, 2)].concat())
-        .collect()
+        .flat_map(|(l, r)| [serialize(l, 2), serialize(r, 2)].concat())
+        .collect();
+    [serialize(server_s_pk, 2), ids].concat()
 }
 
 pub(crate) fn mode_from_ids(optional_ids: &Option<(Vec<u8>, Vec<u8>)>) -> InnerEnvelopeMode {