Skip to content

Laravel Netopia Payments v0.2.2

Choose a tag to compare

View all tags
@aflorea4 aflorea4 released this 27 May 07:53
· 9 commits to main since this release
v0.2.2
bd14253

Security Enhancement: RC4 to AES-256-CBC Migration

This release focuses on significant security improvements by replacing the deprecated RC4 encryption algorithm with the more secure AES-256-CBC encryption method. This change enhances the overall security of payment processing while maintaining full compatibility with the Netopia Payments platform.

What's New

  • Security Enhancement: Completely replaced RC4 encryption with AES-256-CBC for all encryption operations

  • Removed Dependency: Eliminated the felixdorn/php-rc4 dependency as it's no longer needed

  • Improved Error Handling: Enhanced error handling in encryption/decryption operations with detailed error messages

  • Test Compatibility: Fixed test compatibility issues to ensure tests pass in both local and CI environments

Technical Details

  • Replaced the FixedKeyRC4 class implementation with AES-256-CBC encryption

  • Updated all encryption-related tests to validate AES-256-CBC functionality

  • Added proper validation for encryption keys and initialization vectors

  • Improved Config facade mocking in tests for better compatibility across environments

Breaking Changes

None. This update maintains full backward compatibility with previous versions.

Assets 2
Loading