From: Patrick Canterino <patrick@patrick-canterino.de>
Date: Fri, 29 May 2026 13:13:29 +0000 (+0200)
Subject: Here we actually NEED MD5. This one affects only legacy files encrypted using mcrypt.
X-Git-Tag: 4.7.2~10^2~3
X-Git-Url: https://git.p6c8.net/jirafeau/pcanterino.git/commitdiff_plain/b2a6694cd0bb0d0e07610cd408e80698f62680c4?hp=404c669c9226d66ca1189534ad4c1da8e2f165f9

Here we actually NEED MD5. This one affects only legacy files encrypted using mcrypt.
---

diff --git a/lib/functions.php b/lib/functions.php
index 3811544..bb0d251 100644
--- a/lib/functions.php
+++ b/lib/functions.php
@@ -1379,7 +1379,7 @@ function jirafeau_decrypt_file_legacy($fp_src, $fp_dst, $k)
     $m = mcrypt_module_open('rijndael-256', '', 'ofb', '');
     /* Extract key and iv. */
     $crypt_key = $k;
-    $hash_key = hash('sha256', $crypt_key);
+    $hash_key = md5($crypt_key);
     $iv = jirafeau_crypt_create_iv($hash_key, mcrypt_enc_get_iv_size($m));
     /* Init module. */
     mcrypt_generic_init($m, $hash_key, $iv);