3 ms·

What is wrong with mcrypt?

• tptacek 10y ago
  It's a low-level crypto library that leaves avoidance of virtually all the exploitable crypto mistakes as an exercise for the programmer.
• technion 10y ago
  I started writing an answer, but this blog is more comprehensive than anything I could put together: https://paragonie.com/blog/2015/05/if-you-re-typing-word-mcrypt-into-your-code-you-re-doing-it-wrong https://paragonie.com/blog/2015/05/if-you-re-typing-word-mcr... Problem #2 is something I've hit in multiple real-world codebases.