From 4234dc1e291c36a5fc9457e6dc8c9a573d284fff Mon Sep 17 00:00:00 2001
From: yuhan6665 <1588741+yuhan6665@users.noreply.github.com>
Date: Sun, 10 May 2026 22:20:01 -0400
Subject: [PATCH] crypto/tls: fix ECH SNI encoded length
 https://datatracker.ietf.org/doc/html/rfc9849#section-6.1.3

Change-Id: Ifccf7b92f69ddb9ae288991763111bd1f00e61de
Reviewed-on: https://go-review.googlesource.com/c/go/+/765446
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Roland Shoemaker <roland@golang.org>
---
 ech.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ech.go b/ech.go
index 916689e..c19ff76 100644
--- a/ech.go
+++ b/ech.go
@@ -207,7 +207,7 @@ func encodeInnerClientHello(inner *clientHelloMsg, maxNameLength int) ([]byte, e
 	} else {
 		paddingLen = maxNameLength + 9
 	}
-	paddingLen = 31 - ((len(h) + paddingLen - 1) % 32)
+	paddingLen += 31 - ((len(h) + paddingLen - 1) % 32)
 
 	return append(h, make([]byte, paddingLen)...), nil
 }