Index: wp-includes/pluggable.php
===================================================================
--- wp-includes/pluggable.php	(revision 5660)
+++ wp-includes/pluggable.php	(working copy)
@@ -378,6 +378,25 @@
 		if ( false !== strpos($tasty, PASS_COOKIE) )
 			$pass = substr(strstr($tasty, '='), 1);
 	}
+	// Is Suhosin transparent cookie encryption enabled?
+	$suhosin = ini_get('suhosin.cookie.encrypt');
+	if ( 1 == $suhosin || 'On' == $suhosin || 'on' == $suhosin ) {
+		$crypt_cookie = explode('; ', $_SERVER['RAW_HTTP_COOKIE']); // Variable set by Suhosin
+		foreach ( $crypt_cookie as $tasty ) {
+			if ( false !== strpos($tasty, USER_COOKIE) )
+				$crypt_user = substr(strstr($tasty, '='), 1);
+			if ( false !== strpos($tasty, PASS_COOKIE) )
+				$crypt_pass = substr(strstr($tasty, '='), 1);
+		}
+		// Does the encrypted cookie match the tasty cookie?
+		if($crypt_user === $user && $crypt_pass === $pass)
+		{
+			$user = $_COOKIE[USER_COOKIE];
+			$pass = $_COOKIE[PASS_COOKIE];
+		} else
+			die('-1');
+	}
+	
 	if ( !wp_login( $user, $pass, true ) )
 		die('-1');
 	do_action('check_ajax_referer');