diff --git a/src/libsync/clientsideencryption.cpp b/src/libsync/clientsideencryption.cpp
index 1eb7a9bd98..0bc507d1a9 100644
--- a/src/libsync/clientsideencryption.cpp
+++ b/src/libsync/clientsideencryption.cpp
@@ -806,6 +806,9 @@ QByteArray decryptStringAsymmetric(EVP_PKEY *privateKey, const QByteArray& data)
         qCInfo(lcCseDecryption()) << "data decrypted successfully";
     }
 
+    // we don't need extra zeroes in out, so let's only return meaningful data
+    out = QByteArray(out.constData(), outlen);
+
     qCInfo(lcCse()) << out;
     return out;
 }