Ticket #280 (closed defect: fixed)

Opened 4 years ago

Last modified 4 years ago

Crypt::CBC 2.17 breaks compatibility with Mcrypt

Reported by: rjl Owned by: rjl
Priority: normal Milestone: 1.0.1
Component: amavisd-maia Version: 1.0.0
Severity: normal Keywords: Crypt::CBC RandomIV encryption
Cc:

Description

As of version 2.17, the Crypt::CBC perl module has been modified to correct a flaw with the way the Rijndael cipher was being handled. The changes affect /all/ of the ciphers that Crypt::CBC supports, however, including Crypt::Blowfish (which Maia uses). The particular change that breaks Maia's functionality is that by default Crypt::CBC no longer uses the "RandomIV" header ahead of its data, using a salt-based system instead. This creates a problem for the Mcrypt library that Maia uses at the other end (the GUI), which is expecting to see the "RandomIV" header and not a salt.

Change History

Changed 4 years ago by rjl

  • status changed from new to closed
  • resolution set to fixed

Fixed in 956 and tested for backward-compatibility with Crypt::CBC 2.12.

Note: See TracTickets for help on using tickets.