Install
Works with Drupal: 7.xUsing Composer to manage Drupal site dependencies
Downloads
Release notes
Encrypt - Moderately Critical - Weak Encryption - SA-CONTRIB-2015-166
This release makes the following changes to encryption methods and key providers that are included in the project:
Removed the "Basic" (default) encryption method
This method has been deprecated and removed from the list of available methods, though it remains available for decrypting existing data.
Removed the "Mcrypt AES 256" (Rijndael) encryption method
This method has been deprecated and removed from the list of available methods, though it remains available for decrypting existing data.
Removed the "Drupal Private Key" key provider
This provider has been deprecated and removed from the list of available providers, but it remains available for decrypting existing data.
Added "Mcrypt AES (CBC Mode)" encryption method
This method uses Mcrypt and AES in CBC mode, with HMAC authentication. The key used must be 16, 24, or 32 bytes. This is the new default method and is used when creating a default encryption configuration upon installation of the module.
Added option to store keys with Base64 encoding
This option is available by default in all key providers.