Here we actually NEED MD5. This one affects only legacy files encrypted using mcrypt.

diff --git a/lib/functions.php b/lib/functions.php
index 38115442d237ff843eb3a9930dcd35ef897d7c6e..bb0d2515e0f4bc6649d9992bef54088971093c62 100644 (file)
--- a/lib/functions.php
+++ b/lib/functions.php
@@ -1379,7 +1379,7 @@ function jirafeau_decrypt_file_legacy($fp_src, $fp_dst, $k)
     $m = mcrypt_module_open('rijndael-256', '', 'ofb', '');
     /* Extract key and iv. */
     $crypt_key = $k;
     $m = mcrypt_module_open('rijndael-256', '', 'ofb', '');
     /* Extract key and iv. */
     $crypt_key = $k;

-    $hash_key = hash('sha256', $crypt_key);
+    $hash_key = md5($crypt_key);

     $iv = jirafeau_crypt_create_iv($hash_key, mcrypt_enc_get_iv_size($m));
     /* Init module. */
     mcrypt_generic_init($m, $hash_key, $iv);
     $iv = jirafeau_crypt_create_iv($hash_key, mcrypt_enc_get_iv_size($m));
     /* Init module. */
     mcrypt_generic_init($m, $hash_key, $iv);