lucbonnin / aes256_yii_extension Goto Github PK

Your class doesn't do AES-256, it does Rijndael-256, which is not the same.

The 256 in AES refers to the key length. The 256 in Rijndael refers to block length. AES-256 is using Rijndael-128 with 256 bits of key, so in order to implement AES-256 you have to check for 256 bits of key length, and then use Rijndael-128.

Note that AES-256 has suffered some successful attacks, with the researchers coming to the conclusion that AES-128 is actually more secure because it still has the 128 bits security, while AES-192 and AES-256 can be made less secure at only about 112 bits. You might want to reconsider using the maximum available bit length because ironically it doesn't make the result more secure, but less.