Description
openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password cracking at SHA-256 speed instead of the configured KDF cost.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jahlives | openssl_encrypt | < 1.4.6 | 1.4.6 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | openssl-encrypt | < 1.4.6 | 1.4.6 | PYSEC-2026-3976 |
References
- GitHub Security Advisory (GHSA-vxf9-vwp6-2w43) vendor-advisory
- VulnCheck Advisory: openssl_encrypt before 1.4.6 KDF Bypass via Sequential-XOR third-party-advisory