I think my correction is correct, but I don't have time to do check and to do better ...
(I use TB 1.0.5 & PHP 7.1.9) 
You have to select "Use Rijndael with the openssl extension" in the BO > Advanced Parameters > Performance > Encryption 
in file :  classes\Rijndael.php , line 68
```
    public function encrypt($plaintext)
    {
        if (mbstrlen($this->key, '8bit') !== 32) {
            return false;
        } 
    if (function_exists('openssl_encrypt')) {
        // Correction of a BUG !!
        $ivsize = openssl_cipher_iv_length('aes-256-cbc');
        try {
            $iv = random_bytes($ivsize);
        } catch (Exception $e) {
            if (function_exists('openssl_random_pseudo_bytes(')) {
                $iv = openssl_random_pseudo_bytes($ivsize);
            } else {
                throw new Exception('No secure random number generator found on your system.');
            }
        }
        //**************************************//
        $ciphertext = openssl_encrypt(
            $plaintext,
            'aes-256-cbc',
            $this->_key,
            OPENSSL_RAW_DATA,
            $iv
        );
    } else {
```