Add a comment to note that disabling padding is desired
diff --git a/cryptography/bindings/openssl/api.py b/cryptography/bindings/openssl/api.py
index 720a6ad..65a29b8 100644
--- a/cryptography/bindings/openssl/api.py
+++ b/cryptography/bindings/openssl/api.py
@@ -81,7 +81,9 @@
)
if res == 0:
raise OpenSSLError(self)
- # TODO: this should depend on mode.padding
+
+ # We purposely disable padding here as it's handled higher up in the
+ # API.
self._lib.EVP_CIPHER_CTX_set_padding(ctx, 0)
return ctx