deprecated mcrypt module still required by Magento 2

[beni_kelboon]

Hello.

I wanted to install Magento2 on a XAMPP latest version with PHP 7.2. At the time of checking the modules, the PHP mcrypt module was missing. So I installed the previous version of XAMPP with a PHP 7.1. And no problem, after activating the soap module.

The mcrypt module is no longer updated since 2007 and is no longer present in PHP 7.2. Hence two questions:

1- Why use this deprecated module, introducing possible security vulnerabilities, while updated modules exist?

2- Will there be an update for Magento 2 to use a module other than mcrypt, and so Magento 2 will be compatible with PHP 7.2 ?

[Damian Culotta · Accepted solution]

Hi @beni_kelboon,

WHich version of Magento did you installed?

Magento 2.3 will be fully compatible with PHP 7.2 and mcrypt will be/is removed.

Magento 2.2.5 isn't fully compatible with PHP 7.2 yet.

[beni_kelboon · Accepted solution]

I use Magento 2.2.5 as Magento 2.3 is not already available !

I saw in another post an answer to the same question.

Thanks.

[santoshkumarv]

hi,

i am installing magenta 2.3 beta version, it asks for crypt. how to make sure it uses lib sodium. i can't move forward with installation of 2.3 beta.

Thanks

Santosh