#35069 [NEW]: 4.4.1 update seriously breaks mcrypt decryption
| From: | greg at warprecords dot com | Date: | Wed, 02 Nov 2005 17:12:45 +0000 |
| Subject: | #35069 [NEW]: 4.4.1 update seriously breaks mcrypt decryption | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-87419@lists.php.net to get a copy of this message | ||
From: greg at warprecords dot com
Operating system: FreeBSD 5.3R-p5
PHP version: 4.4.1
PHP Bug Type: mcrypt related
Bug description: 4.4.1 update seriously breaks mcrypt decryption
Description:
------------
Upgraded to 4.4.1 from 4.4.0 via FreeBSD ports broke some code
we use to decrypt Blowfish encrypted strings generated and
handled by PHP and passed between two servers.
Encrypting with 4.4.1
and decrypting with 4.4.0
works fine, We have fallen back to this.
Encrypting with 4.4.1
and decrypting with 4.4.1
is broken.
Not tried 4.4.0 to 4.4.1.
Reproduce code:
---------------
$SID = @mcrypt_ecb(MCRYPT_Blowfish, $crypt_key, $SID, MCRYPT_DECRYPT);
Expected result:
----------------
Encrypted string is decrypted correctly.
Actual result:
--------------
Encrypted string is decrypted as garbage.
--
Edit bug report at http://bugs.php.net/?id=35069&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=35069&r=trysnapshot4
Try a CVS snapshot (php5.0): http://bugs.php.net/fix.php?id=35069&r=trysnapshot50
Try a CVS snapshot (php5.1): http://bugs.php.net/fix.php?id=35069&r=trysnapshot51
Fixed in CVS: http://bugs.php.net/fix.php?id=35069&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=35069&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=35069&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=35069&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=35069&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=35069&r=support
Expected behavior: http://bugs.php.net/fix.php?id=35069&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=35069&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=35069&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=35069&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=35069&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=35069&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=35069&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=35069&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=35069&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=35069&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=35069&r=mysqlcfg