---
title: "weak-cryptography"
description: "Detect deprecated cryptographic primitives."
image: "https://strider.gempir.com/og.png"
---

> Documentation Index
> Fetch the complete documentation index at: https://strider.gempir.com/llms.txt
> Use this file to discover all available pages before exploring further.

# weak-cryptography

**Default severity:** `warning`

Reports calls into MD5, SHA-1, DES, 3DES, and RC4. These primitives are unsafe
for new security-sensitive designs; checksum-only legacy uses can be excluded
locally through configuration.

## Bad

```go
sum := md5.Sum(data)
```

## Good

```go
sum := sha256.Sum256(data)
```

Source: https://strider.gempir.com/analyzers/weak-cryptography/index.mdx