diff --git a/internal/crypto/crypto.go b/internal/crypto/crypto.go
index 58c82e78c..d7ac9c3d4 100644
--- a/internal/crypto/crypto.go
+++ b/internal/crypto/crypto.go
@@ -27,7 +27,7 @@ const (
 
 var (
 	// ErrUnauthenticated is returned when ciphertext verification has failed.
-	ErrUnauthenticated = errors.New("ciphertext verification failed")
+	ErrUnauthenticated = fmt.Errorf("ciphertext verification failed")
 )
 
 // Key holds encryption and message authentication keys for a repository. It is stored