From b2a6694cd0bb0d0e07610cd408e80698f62680c4 Mon Sep 17 00:00:00 2001
From: Patrick Canterino <patrick@patrick-canterino.de>
Date: Fri, 29 May 2026 15:13:29 +0200
Subject: [PATCH 1/1] Here we actually NEED MD5. This one affects only legacy
 files encrypted using mcrypt.

---
 lib/functions.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/functions.php b/lib/functions.php
index 3811544..bb0d251 100644
--- a/lib/functions.php
+++ b/lib/functions.php
@@ -1379,7 +1379,7 @@ function jirafeau_decrypt_file_legacy($fp_src, $fp_dst, $k)
     $m = mcrypt_module_open('rijndael-256', '', 'ofb', '');
     /* Extract key and iv. */
     $crypt_key = $k;
-    $hash_key = hash('sha256', $crypt_key);
+    $hash_key = md5($crypt_key);
     $iv = jirafeau_crypt_create_iv($hash_key, mcrypt_enc_get_iv_size($m));
     /* Init module. */
     mcrypt_generic_init($m, $hash_key, $iv);
-- 
2.43.0