The password is encrypted with AES, but in order to save the resulting binary info as a fixed-length string (divisible by 16) it is padded. This conversion and padding is done via a third-party library so it would be annoying to change it. I will double check with the person who wrote our code too, but they are not here today.