Field decryption fails when disabling the "Encrypt field" setting from the field config edit form

Created on 22 April 2025, 3 days ago

Problem/Motivation

When enabling encryption for a configurable field on the user entity, and then disabling encryption, data stays encrypted, even after running the batch process.
Even more worrying, the encrypted data is lost from the encrypted field storage.

I get the same result when removing encryption from the "Encrypted fields overview page" on /admin/config/system/field-encrypt/field-overview

Steps to reproduce

Install and enable field_encrypt 4.0.0-alpha1
Set up an encryption profile on the settings form at /admin/config/system/field-encrypt
Add a configurable field to the user entity (a simple string field)
Enable encryption for this field
Add data to the field
Disable encryption for the field, from the field configuration form
Process the queue to update entities /admin/config/system/field-encrypt/process-queues
The placeholder value is still in the database and the encrypted storage data is gone

🐛 Bug report

Status

Active

Version

4.0

Component

Code

Created by

🇫🇷France arousseau

Live updates comments and jobs are added and updated live.

data loss

Merge Requests

!83Field decryption fails when disabling the "Encrypt field" setting from the field config edit form
Open
🇫🇷France arousseau
updated 2 days ago

Comments & Activities

Issue created by @arousseau
Comment 2 days ago →
🇫🇷France arousseau
Ok apparently this was caused by 📌 Define 'original' as property on the entity object Needs work removing the original property.

I will submit a MR with the fix. The #2839195 issue code is committed to D11.2 so this fix should be ready before then, to avoid potential loss of data for someone upgrading and changing their field encryption settings...
Merge request !83Draft: Issue #3520512: Switch from $entity->original to $entity->getOriginal(). → (Open) created by arousseau
Pipeline finished with Failed
2 days ago
#479993
Pipeline finished with Failed
2 days ago
#479998

contrib.social Blog FAQ Discussions

Production build 0.71.5 2024

Field decryption fails when disabling the "Encrypt field" setting from the field config edit form

Problem/Motivation

Steps to reproduce

Merge Requests

!83Field decryption fails when disabling the "Encrypt field" setting from the field config edit formOpen

Comments & Activities

!83Field decryption fails when disabling the "Encrypt field" setting from the field config edit form
Open