Security Advisories (2)
CVE-2025-2814 (2025-04-12)

Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable.  In that case, Crypt::CBC will fallback to use the insecure rand() function.

CPANSA-Crypt-CBC-2021-0001 (2021-05-17)

Fixed bug involving manually-specified IV not being used in some circumstances.

Changes for version 3.03

  • Fixed bug which caused an extraneous block of garbage data to be appended to encrypted string when "nopadding" specified and plaintext is even multiple of blocksize.

Documentation

Modules

Encrypt Data with Cipher Block Chaining Mode

Provides

in lib/Crypt/CBC/PBKDF.pm
in lib/Crypt/CBC/PBKDF/none.pm
in lib/Crypt/CBC/PBKDF/opensslv1.pm
in lib/Crypt/CBC/PBKDF/opensslv2.pm
in lib/Crypt/CBC/PBKDF/pbkdf2.pm
in lib/Crypt/CBC/PBKDF/randomiv.pm