From b3037dee6a578254161fa96766d77bf8d007b55c Mon Sep 17 00:00:00 2001 From: Roeland Jago Douma Date: Thu, 3 Dec 2020 16:31:02 +0100 Subject: [PATCH] FIXME use default RC4 method * We should pick better default method! Signed-off-by: Roeland Jago Douma --- apps/encryption/lib/Crypto/Crypt.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/encryption/lib/Crypto/Crypt.php b/apps/encryption/lib/Crypto/Crypt.php index 94979bde86..2ba30425c7 100644 --- a/apps/encryption/lib/Crypto/Crypt.php +++ b/apps/encryption/lib/Crypto/Crypt.php @@ -677,7 +677,7 @@ class Crypt { throw new MultiKeyDecryptException('Cannot multikey decrypt empty plain content'); } - if (openssl_open($encKeyFile, $plainContent, $shareKey, $privateKey)) { + if (openssl_open($encKeyFile, $plainContent, $shareKey, $privateKey, 'RC4')) { return $plainContent; } else { throw new MultiKeyDecryptException('multikeydecrypt with share key failed:' . openssl_error_string()); @@ -702,7 +702,7 @@ class Crypt { $shareKeys = []; $mappedShareKeys = []; - if (openssl_seal($plainContent, $sealed, $shareKeys, $keyFiles)) { + if (openssl_seal($plainContent, $sealed, $shareKeys, $keyFiles, 'RC4')) { $i = 0; // Ensure each shareKey is labelled with its corresponding key id