`decode_pkcs5` does not remove padding about russh HOT 2 CLOSED

diff --git a/russh-keys/src/format/pkcs5.rs b/russh-keys/src/format/pkcs5.rs
index 0e5a2a5..821a8bf 100644
--- a/russh-keys/src/format/pkcs5.rs
+++ b/russh-keys/src/format/pkcs5.rs
@@ -25,7 +24,8 @@ pub fn decode_pkcs5(
                 #[allow(clippy::unwrap_used)] // AES parameters are static
                 let c = cbc::Decryptor::<Aes128>::new_from_slices(&md5.0, &iv[..]).unwrap();
                 let mut dec = secret.to_vec();
-                c.decrypt_padded_mut::<Pkcs7>(&mut dec)?;
+                let n = c.decrypt_padded_mut::<Pkcs7>(&mut dec)?.len();
+                dec.truncate(n);
                 dec
             }
             Encryption::Aes256Cbc(_) => unimplemented!(),