Install

Works with Drupal: 7.x

Using Composer to manage Drupal site dependencies

Downloads

Download tar.gz 28.06 KB
MD5: 9edfb8c476fbb928e7b89050dac3d42a
SHA-1: f1a7fd0787ff4fc7021c857df800699ace267bcb
SHA-256: c13d9bc35963266f6487474107d00962db280b47638da4c8dfce05ae05d1c7fb
Download zip 40.07 KB
MD5: 69b3b9d026ef8787f8de32bcf984165b
SHA-1: 8a2fa1888e0883439ac8be223ca6c8653ee49dbc
SHA-256: 8b1804c6e91b1acf0bfc1464c2ac2b65849baec45ddf45e283a98e65aa18ecdd

Release notes

Encrypt - Moderately Critical - Weak Encryption - SA-CONTRIB-2015-166

This release makes the following changes to encryption methods and key providers that are included in the project:

Removed the "Basic" (default) encryption method
This method has been deprecated and removed from the list of available methods, though it remains available for decrypting existing data.

Removed the "Mcrypt AES 256" (Rijndael) encryption method
This method has been deprecated and removed from the list of available methods, though it remains available for decrypting existing data.

Removed the "Drupal Private Key" key provider
This provider has been deprecated and removed from the list of available providers, but it remains available for decrypting existing data.

Added "Mcrypt AES (CBC Mode)" encryption method
This method uses Mcrypt and AES in CBC mode, with HMAC authentication. The key used must be 16, 24, or 32 bytes. This is the new default method and is used when creating a default encryption configuration upon installation of the module.

Added option to store keys with Base64 encoding
This option is available by default in all key providers.

Created by: rlhawk
Created on: 18 Nov 2015 at 18:08 UTC
Last updated: 20 Nov 2015 at 19:23 UTC
Security update
New features
Unsupported

Other releases