PHP mcrypt extension to be removed in PHP 7.1

[djmattyg007]

As per this post in the PHP internals mailing list, the vote to remove the mcrypt extension from PHP has passed. Unfortunately, Magento 2 still makes use of mcrypt, despite it long being known as being abandonware:

https://github.com/magento/magento2/blob/develop/lib/internal/Magento/Framework/Encryption/Crypt.php

How is Magento planning on handling the migration to something other than mcrypt?

[Vinai]

Suggestion: libsodium
Related: The State of Cryptography in PHP

[maxbucknell]

Looks like this work is now being tracked in #5701.

[kandy]

is duplicate