--- loncom/Lond.pm	2023/12/28 18:14:08	1.25
+++ loncom/Lond.pm	2025/05/13 04:07:06	1.26
@@ -1,6 +1,6 @@
 # The LearningOnline Network
 #
-# $Id: Lond.pm,v 1.25 2023/12/28 18:14:08 raeburn Exp $
+# $Id: Lond.pm,v 1.26 2025/05/13 04:07:06 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -1277,7 +1277,8 @@ sub crslti_itemid {
                     my $keynum = $courselti{$id}{'cipher'};
                     my $privkey = &get_dom("getdom:$cdom:private:$keynum:lti:key");
                     if ($privkey ne '') {
-                        my $cipher = new Crypt::CBC($privkey);
+                        my $cipher = Crypt::CBC->new(-pass   => $privkey,
+                                                     -cipher => 'Crypt::DES');
                         $secret = $cipher->decrypt_hex($secret);
                     }
                 }
@@ -1364,7 +1365,8 @@ sub domlti_itemid {
                     my $keynum = $lti{$id}{'cipher'};
                     my $privkey = &get_dom("getdom:$dom:private:$keynum:lti:key");
                     if ($privkey ne '') {
-                        my $cipher = new Crypt::CBC($privkey);
+                        my $cipher = Crypt::CBC->new(-pass   => $privkey,
+                                                     -cipher => 'Crypt::DES');
                         $secret = $cipher->decrypt_hex($secret);
                     }
                 }
@@ -1540,7 +1542,8 @@ sub get_lti_credentials {
                     unless ($privhost) {
                         my $privkey = &get_dom("getdom:$cdom:private:$keynum:$privname:key");
                         if (($privkey ne '') && ($secret ne '')) {
-                            my $cipher = new Crypt::CBC($privkey);
+                            my $cipher = Crypt::CBC->new(-pass   => $privkey,
+                                                         -cipher => 'Crypt::DES');
                             $secret = $cipher->decrypt_hex($secret);
                         } else {
                             undef($secret);