diff options
| author | Nikita Popov <nikic@php.net> | 2014-03-01 23:51:03 +0100 |
|---|---|---|
| committer | Nikita Popov <nikic@php.net> | 2014-03-05 15:32:32 +0100 |
| commit | a861a3a93d89a50ce58e1ab1abef1eb501f97483 (patch) | |
| tree | 88f2cff036668095d35e3491281406874a1c0fc8 /ext/mcrypt/php_mcrypt.h | |
| parent | 25d801f97ec3f4bcac8977efd50f843eba9b19e1 (diff) | |
| download | php-git-a861a3a93d89a50ce58e1ab1abef1eb501f97483.tar.gz | |
Abort on invalid key size
Previously an incorrectly sized key was either silently padded
with NUL bytes or truncated. Especially the silent nature of this
behavior makes it extremely easy to use weak encryption. A common
mistake - which has also been extensively made in our tests - is
to use a password instead of a key.
Incorrectly sized keys will now be rejected.
Diffstat (limited to 'ext/mcrypt/php_mcrypt.h')
0 files changed, 0 insertions, 0 deletions