1 --- roundcube_0.1~beta2.2/program/include/main.inc 2006-12-22 23:26:24.000000000 +0100
2 +++ roundcube_0.1~beta2.2/program/include/main.inc 2007-03-18 10:24:11.000000000 +0100
4 // encrypt IMAP password using DES encryption
5 function encrypt_passwd($pass)
7 - $cypher = des(get_des_key(), $pass, 1, 0, NULL);
8 + $td = mcrypt_module_open(MCRYPT_TripleDES, "", MCRYPT_MODE_ECB, "");
9 + $iv = mcrypt_create_iv(mcrypt_enc_get_iv_size($td), MCRYPT_RAND);
10 + mcrypt_generic_init($td, get_des_key(), $iv);
11 + $cypher = mcrypt_generic($td, $pass);
12 + mcrypt_generic_end($td);
13 + mcrypt_module_close($td);
15 return base64_encode($cypher);
19 // decrypt IMAP password using DES encryption
20 function decrypt_passwd($cypher)
22 - $pass = des(get_des_key(), base64_decode($cypher), 0, 0, NULL);
23 - return preg_replace('/\x00/', '', $pass);
24 + $td = mcrypt_module_open(MCRYPT_TripleDES, "", MCRYPT_MODE_ECB, "");
25 + $iv = mcrypt_create_iv(mcrypt_enc_get_iv_size($td), MCRYPT_RAND);
26 + mcrypt_generic_init($td, get_des_key(), $iv);
27 + $pass = mdecrypt_generic($td, base64_decode($cypher));
28 + mcrypt_generic_end($td);
29 + mcrypt_module_close($td);