fuzzy_key_provider
7 sites
Security covered
Another storage method uses Drupal’s hash_salt as an encryption key.
The hash_salt is already used as a secure key for generating one-time links, hashing passwords, and other security-critical operations. It can also be protected from being stored directly in settings.php.
If the hash_salt were ever compromised, the entire site’s security would be at risk. Because it is such a critical and trusted secret, it can also serve as a secure basis for encrypting stored data.
This module extends functionality of the Key module.
For more details, see issue issue #3028014.