> This begs the question: what does openssl_encrypt actually do with just a string of random bytes passed as the "key". I can't find anything in the OpenSSL or PHP/openssl source code that clearly identifies any particular action There is no such name (git grep -I openssl_encrypt) in the OpenSSL source. This is some PHP function that is calling underlying OpenSSL. I would ask on the PHP forum(s) what it's doing. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users