note 126359 added to function.openssl-seal

Some critical details that are not in the docs, nor widely written about elsewhere. - The envelope key is a 128-bit RSA key, randomly generated. - The data is encrypted with (A)RC4 using the envelope key. - The envelope key is encrypted for transmission with PKCS1 v1.5. It is NOT the OAEP padding variant. PKCS1 v1.5 is even older, and not widely supported anymore. At least this was true for openssl_seal in PHP 7.2 that we are using. (Note: In Python you can decrypt this envelope key with the Cryptography package, using padding.PKCS1v15()) The combination of RC4 and PKCS1 v1.5 make this function actually semi-obsolete for security use in my opinion. ---- Server IP: 45.112.84.4 Probable Submitter: 45.112.85.242 (proxied: 121.79.222.219) ---- Manual Page -- https://php.net/manual/en/function.openssl-seal.php Edit -- https://main.php.net/note/edit/126359 Del: integrated -- https://main.php.net/note/delete/126359/integrated Del: useless -- https://main.php.net/note/delete/126359/useless Del: bad code -- https://main.php.net/note/delete/126359/bad+code Del: spam -- https://main.php.net/note/delete/126359/spam Del: non-english -- https://main.php.net/note/delete/126359/non-english Del: in docs -- https://main.php.net/note/delete/126359/in+docs Del: other reasons-- https://main.php.net/note/delete/126359 Reject -- https://main.php.net/note/reject/126359 Search -- https://main.php.net/manage/user-notes.php