Use random_bytes instead OpenSSL

2016-01-05 17:08:57 +01:00 · 2016-01-05 17:08:57 +01:00 · b9ff16498b
parent 61dd191253
commit b9ff16498b
1 changed files with 1 additions and 8 deletions
--- a/apps/encryption/lib/crypto/crypt.php
+++ b/apps/encryption/lib/crypto/crypt.php
@ -614,14 +614,7 @@ class Crypt {
 	 * @throws \Exception
 	 */
 	public function generateFileKey() {
-		// Generate key
-		$key = base64_encode(openssl_random_pseudo_bytes(32, $strong));
-		if (!$key || !$strong) {
-				// If OpenSSL indicates randomness is insecure, log error
-				throw new \Exception('Encryption library, Insecure symmetric key was generated using openssl_random_pseudo_bytes()');
-		}
-
-		return $key;
+		return base64_encode(random_bytes(32));
 	}

 	/**