Security Problem: Insecure encryption in LSLSystemAPI.cs

[zauberparacelsus]

During the days of InWorldz, I had added a multi-function string processing/encoding function called iwStringCodec. One of its capabilities was that it could perform AES encryption and decryption.

However, in rushing to get the function completed, I made a very amateur-hour mistake: never base your encryption on code that was copied & pasted from StackOverflow.

So, in order to ensure that the code is actually secure, the encryption functions need to be rewritten by someone who knows what they are doing [IE: not me].

The relevant functions are:

• AESEncrypt() https://github.com/HalcyonGrid/halcyon/blob/master/InWorldz/InWorldz.Phlox.Engine/LSLSystemAPI.cs#L16431
• AESDecrypt() https://github.com/HalcyonGrid/halcyon/blob/master/InWorldz/InWorldz.Phlox.Engine/LSLSystemAPI.cs#L16431