--- loncom/Lond.pm	2024/08/18 01:37:26	1.8.2.3.2.5
+++ loncom/Lond.pm	2025/05/13 07:15:29	1.8.2.3.2.6
@@ -1,6 +1,6 @@
 # The LearningOnline Network
 #
-# $Id: Lond.pm,v 1.8.2.3.2.5 2024/08/18 01:37:26 raeburn Exp $
+# $Id: Lond.pm,v 1.8.2.3.2.6 2025/05/13 07:15:29 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -1063,7 +1063,8 @@ sub crslti_itemid {
                     my $keynum = $courselti{$id}{'cipher'};
                     my $privkey = &get_dom("getdom:$cdom:private:$keynum:lti:key");
                     if ($privkey ne '') {
-                        my $cipher = new Crypt::CBC($privkey);
+                        my $cipher = Crypt::CBC->new(-pass   => $privkey,
+                                                     -cipher => 'Crypt::DES');
                         $secret = $cipher->decrypt_hex($secret);
                     }
                 }
@@ -1150,7 +1151,8 @@ sub domlti_itemid {
                     my $keynum = $lti{$id}{'cipher'};
                     my $privkey = &get_dom("getdom:$dom:private:$keynum:lti:key");
                     if ($privkey ne '') {
-                        my $cipher = new Crypt::CBC($privkey);
+                        my $cipher = Crypt::CBC->new(-pass   => $privkey,
+                                                     -cipher => 'Crypt::DES');
                         $secret = $cipher->decrypt_hex($secret);
                     }
                 }
@@ -1326,7 +1328,8 @@ sub get_lti_credentials {
                     unless ($privhost) {
                         my $privkey = &get_dom("getdom:$cdom:private:$keynum:$privname:key");
                         if (($privkey ne '') && ($secret ne '')) {
-                            my $cipher = new Crypt::CBC($privkey);
+                            my $cipher = Crypt::CBC->new(-pass   => $privkey,
+                                                         -cipher => 'Crypt::DES');
                             $secret = $cipher->decrypt_hex($secret);
                         } else {
                             undef($secret);