if pubkey is the same and no signature in payload and signature checking is not enabled, we must also return the aes key

salt/crypt.py

@@ -464,6 +464,9 @@ class Auth(object):
                               'reply does not contain any signature. Either enable signing the public '
                               'key on the master or disable signature verification on the minion.')
                     return ''
+                else:
+                    aes, token = self.decrypt_aes(payload, False)
+                    return aes
 
         else:
             # verify the masters pubkey signature if the minion