hi..
i have the following piece of code.

#!/usr/bin/perl

use strict;
use Crypt::CBC ();
use Digest::SHA ();

my $pass = 'test';
my $text = 'hutzelhutzelhutzel';

my $key = &Digest::SHA::sha512_hex($pass);
print "Key1: $key\n";

my $cbc = Crypt::CBC->new(
   'cipher'         => 'DES',
   'key'            => $key,
   'regenerate_key' => 0,
   'prepend_iv'     => 0,
);

my $cipher = $cbc->encrypt($text);
print "Cipher: $cipher\n";

$cbc = Crypt::CBC->new(
   'cipher'         => 'DES',
   'key'            => $key,
   'regenerate_key' => 0,
   'prepend_iv'     => 0,
);

print "Plain1: ", $cbc->decrypt($cipher), "\n";

# new password
$pass = 'test2';
$key = &Digest::SHA::sha512_hex($pass);
print "Key2: $key\n";

$cbc = Crypt::CBC->new(
   'cipher'         => 'DES',
   'key'            => $key,
   'regenerate_key' => 0,
   'prepend_iv'     => 0,
);

print "Plain2: ", $cbc->decrypt($cipher), "\n";
[download]

As you can see, i'm changing the password between the first and second decryption but the results (Plain1, Plain2) are both the same and both are equal to $text. Am I missing something?

This is perl, v5.8.4 built for MSWin32-x86-multi-thread
$Crypt::CBC::VERSION eq '2.12'