note 99188 deleted from function.openssl-encrypt by cmb
| From: | cmb@php.net | Date: | Fri, 01 Jul 2016 17:27:45 +0000 |
| Subject: | note 99188 deleted from function.openssl-encrypt by cmb | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-205860@lists.php.net to get a copy of this message | ||
Note Submitter: public at grik dot net
----
In 5.3.3 they added a new parameter, string $iv (initialization vector)
Real parameters are:
string openssl_encrypt ( string $data , string $method , string $password, bool $raw_output = false,
string $iv )
If $iv is missing, a warning is issued: "Using an empty Initialization Vector (iv) is
potentially insecure and not recommended".
If $iv is too short, another warning:
"IV passed is only 3 bytes long, cipher expects an IV of precisely 8 bytes, padding with
\0"
same IV should be used in openssl_decrypt()