#22828 [Opn->Fbk]: Warning: mcrypt_decrypt(): The IV parameter must be as long as the blocksize

ID: 22828 Updated by: derick@php.net Reported By: cbair at dragonmagic dot net -Status: Open +Status: Feedback Bug Type: mcrypt related Operating System: Red Hat Linux/Cobalt RaQ3 PHP Version: 4.3.2RC1 New Comment: The code you pasted is not complete and doesn't generate any error for me. Also, you're creating an IV for an ECB mode and you're using CBC to encrypt? That's not correct either. Please provide a full script that demonstrates the problem (so that I can copy & paste it) and ad your libmcrypt version to this bugreport. Derick Previous Comments: ------------------------------------------------------------------------ [2003-03-22 13:59:09] cbair at dragonmagic dot net I apologize. I went back through and payments made before upgrading to 4.3.2RC1 show fine still. So it must be when inputting the CC number into the database. Again, this script hasn't been upgraded since 4.2, so it should still work the same if the mcrypt functions haven't changed. Code here as is for inserting: $algo = MCRYPT_RIJNDAEL_192; $iv = mcrypt_create_iv(mcrypt_get_iv_size($algo, MCRYPT_MODE_ECB), MCRYPT_RAND); $enc_str = mcrypt_encrypt($algo, $salt, $cc_num, MCRYPT_MODE_CBC, $iv); $new_cc = addslashes($enc_str); $construct = "INSERT INTO payment (payee,amount,bill_name,bill_add,bill_city,bill_state,bill_code,bill_country,ship_name,ship_add,ship_city,ship_state,ship_code,ship_country,email,phone_home,phone_work,cc_type,cc_exp,cc_name,cc_num,cc_cvv2,description,date,iv) VALUES ('$endorsee','$total','$bill_name','$bill_add','$bill_city','$bill_state','$bill_code','$bill_country','$ship_name','$ship_add','$ship_city','$ship_state','$ship_code','$ship_country','$email','$phone_home','$phone_work','$cc_type','$cc_exp','$cc_name','$new_cc','$cc_cvv2','$description','$date','$iv')"; $set_mysql = mysql_query($construct) or die("Could not insert your information into the database. Your information was not stored or sent. Please try again later. If you feel this is in error, please contact <a href=\"mailto:$admin\">$admin</a>."); ------------------------------------------------------------------------ [2003-03-22 13:50:58] cbair at dragonmagic dot net A payment script I wrote up for simplicity has worked throughout 4.2 and up to 4.3.1. I recently installed 4.3.2RC1 on my RaQ3 server with mcrypt, and now the payment script, upon trying to retrieve a credit card number, reveals: Warning: mcrypt_decrypt(): The IV parameter must be as long as the blocksize There have been no changes to the script since 4.2. It retrieves information from a MySQL database, which also has not changed or been upgraded, except extra rows added as people pay. I cannot retrieve any payment information now with this. If you need sample code, please let me know. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=22828&edit=1