Why does not Crypt check hmac?

[yejune]

Why does not Crypt check hmac?

When decrypting an encrypted character, entering a different key will return an incorrect decryption character.

 $text = 'This is a secret text';

 $key       = 'le password';
 $encrypted = $crypt->encrypt($text, $key);

 $key       = 'le password2';
 echo $crypt->decrypt($encrypted, $key);

result:

���0�Pz�@��/x���'�t��

If hmac is checked and is not valid, an empty string must be returned.

[sergeyklay]

 $text = '';

 $key       = 'le password';
 $encrypted = $crypt->encrypt($text, $key);

 $key       = 'le password2';
 echo $crypt->decrypt($encrypted, $key);

Is it correct behavior if decrypt will return an empty string here?

[yejune]

Sorry.

If it is not valid, it throws an exception.

[sergeyklay]

Fixed in the 3.4.0 version. Feel free to open a new issue if the problem appears again. Thank you for contributing.