This question already has an answer here:
My shop was moved to a server without mcrypt and for some reason mcrypt can not be installed (don't ask me why!).
Looks like passwords are only encrypted with md5 with a salt (bad!) so I wonder what mcrypt is used for at all. Someone hacked Magento and was able to install it without mcrypt. Does not sound good to me but it was working for him.
Now i would like to know what for encrypt is used and will the show break if I replace it with a dummy? Is there a better workaround? May get secure random from openssl and add an encryption lib?
- What is mcrypt used for in Magento?
- Is a good workaround possible?