note 99188 deleted from function.openssl-encrypt by cmb

From: Date: Fri, 01 Jul 2016 17:27:45 +0000
Subject: note 99188 deleted from function.openssl-encrypt by cmb
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-205860@lists.php.net to get a copy of this message
Note Submitter: public at grik dot net ---- In 5.3.3 they added a new parameter, string $iv (initialization vector) Real parameters are: string openssl_encrypt ( string $data , string $method , string $password, bool $raw_output = false, string $iv ) If $iv is missing, a warning is issued: "Using an empty Initialization Vector (iv) is potentially insecure and not recommended". If $iv is too short, another warning: "IV passed is only 3 bytes long, cipher expects an IV of precisely 8 bytes, padding with \0" same IV should be used in openssl_decrypt()

« previous php.notes (#205860) next »