Skip to content

weak-cryptography

Detect deprecated cryptographic primitives.

Updated View as Markdown

Default severity: warning

Reports calls into MD5, SHA-1, DES, 3DES, and RC4. These primitives are unsafe for new security-sensitive designs; checksum-only legacy uses can be excluded locally through configuration.

Bad

sum := md5.Sum(data)

Good

sum := sha256.Sum256(data)
Navigation

Type to search…

↑↓ navigate↵ selectEsc close