I started writing an answer, but this blog is more comprehensive than anything I could put together: https://paragonie.com/blog/2015/05/if-you-re-typing-word-m

I started writing an answer, but this blog is more comprehensive than anything I could put together: https://paragonie.com/blog/2015/05/if-you-re-typing-word-mcrypt-into-your-code-you-re-doing-it-wrong https://paragonie.com/blog/2015/05/if-you-re-typing-word-mcr... Problem #2 is something I've hit in multiple real-world codebases.