diff --git a/shadowaead_2022/encrypted_stream.go b/shadowaead_2022/encrypted_stream.go
index 90abf32..59935ff 100644
--- a/shadowaead_2022/encrypted_stream.go
+++ b/shadowaead_2022/encrypted_stream.go
@@ -32,7 +32,7 @@ func isTLSHandshake(payload []byte) bool {
 	if tlsVersion != tlsVersion10 && tlsVersion != tlsVersion12 {
 		return false
 	}
-	return true
+	return readTLSChunkEnd(payload) > 0
 }
 
 func readTLSChunkEnd(payload []byte) int {