Blowfish should use a large key
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。
ID: java-security/blowfish-short-key
Language: Java
Severity: Warning
Category: Security
CWE: 326
Description
When using Blowfish, use at least 128 bits of entropy to prevent potential vulnerabilities.
Learn More
Arguments
min-length: Minimum length for a Blowfish key. Default: 128.
Non-Compliant Code Examples
public class MyClass {
public void test () {
KeyGenerator keyGen = KeyGenerator.getInstance("Blowfish");
keyGen.init(64);
}
}
Compliant Code Examples
public class MyClass {
public void test () {
KeyGenerator keyGen = KeyGenerator.getInstance("Blowfish");
keyGen.init(128);
}
}
Seamless integrations. Try Datadog Code Analysis
