Horde_Cipher_Blowfish is broken. Fallback to RC2 instead.
authorMichael M Slusarz <slusarz@curecanti.org>
Sun, 5 Jul 2009 20:31:08 +0000 (14:31 -0600)
committerMichael M Slusarz <slusarz@curecanti.org>
Sun, 5 Jul 2009 20:31:08 +0000 (14:31 -0600)
framework/Secret/lib/Horde/Secret.php

index f036b02..95292da 100644 (file)
@@ -102,8 +102,7 @@ class Horde_Secret
         $idx = hash('md5', $key);
 
         if (!isset(self::$_cipherCache[$idx])) {
-            self::$_cipherCache[$idx] = &Horde_Cipher::factory('blowfish');
-            self::$_cipherCache[$idx]->setBlockMode('ofb64');
+            self::$_cipherCache[$idx] = Horde_Cipher::factory('rc2');
             self::$_cipherCache[$idx]->setKey($key);
         }