From: Michael M Slusarz <slusarz@curecanti.org>
Date: Sun, 5 Jul 2009 20:31:08 +0000 (-0600)
Subject: Horde_Cipher_Blowfish is broken.  Fallback to RC2 instead.
X-Git-Url: https://git.internetallee.de/?a=commitdiff_plain;h=909134e15a0f30646b7360144a1613d34243dec4;p=horde.git

Horde_Cipher_Blowfish is broken.  Fallback to RC2 instead.
---

diff --git a/framework/Secret/lib/Horde/Secret.php b/framework/Secret/lib/Horde/Secret.php
index f036b02da..95292da85 100644
--- a/framework/Secret/lib/Horde/Secret.php
+++ b/framework/Secret/lib/Horde/Secret.php
@@ -102,8 +102,7 @@ class Horde_Secret
         $idx = hash('md5', $key);
 
         if (!isset(self::$_cipherCache[$idx])) {
-            self::$_cipherCache[$idx] = &Horde_Cipher::factory('blowfish');
-            self::$_cipherCache[$idx]->setBlockMode('ofb64');
+            self::$_cipherCache[$idx] = Horde_Cipher::factory('rc2');
             self::$_cipherCache[$idx]->setKey($key);
         }