$c = base64_decode(str_replace(['--', '_'], ['+', '/'], $key));

        $ivlen = openssl_cipher_iv_length($cipher = "AES-128-CFB");
        $iv = substr($c, 0, $ivlen);
        $hmac = substr($c, $ivlen, $sha2len = 32);
        $ciphertext_raw = substr($c, $ivlen + $sha2len); //<- When I comment since this line, the rule doesn't crash
        $original_plaintext = openssl_decrypt($ciphertext_raw, $cipher, $this->privateKey, options: 0,  iv: $iv);
        $calcmac = hash_hmac('sha256', $ciphertext_raw, $this->privateKey, binary: true);