このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。
ID: csharp-security/weak-cipher
Language: C#
Severity: Error
Category: Security
CWE: 327
Description
The DESCryptoServiceProvider should only be used with legacy code for compatibility reasons. For new code, consider using the Aes class.
Learn More
Non-Compliant Code Examples
class MyClass {
public static void weakEncryption()
{
DES des = new DESCryptoServiceProvider();
CryptoStream encStream = new CryptoStream(fout, des.CreateEncryptor(desKey, desIV), CryptoStreamMode.Write);
}
}
class MyClass {
public static void weakEncryption()
{
DES des = new DESCryptoServiceProvider();
CryptoStream encStream = new CryptoStream(fout, des.CreateEncryptor(desKey, desIV), CryptoStreamMode.Write);
}
}
Seamless integrations. Try Datadog Code Analysis
