danpal/encryptor — comment on commit c1b7e39538cb841a809053a7936b610e92a4bde0
File: lib/encryptor.rb line 57
By nahi:

Yes, pkcs5_keyivgen uses fixed IV for encryption. And fixed IV + CBC mode is vulnerable when an attacker can do chosen text attack. You need to use another mode or Cipher#random_iv and keep the generated IV with key for decryption.