pyca/cryptography

Top findings

• CriticalCWE-3273DES / TripleDES

  src/cryptography/hazmat/decrepit/ciphers/algorithms.py:49

  Raw evidence

  "Two-key TripleDES (16-byte keys) is deprecated and "

• CriticalCWE-327SSLv2 / SSLv3

  src/_cffi_src/openssl/ssl.py:58

  Raw evidence

  static const long SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER;

• CriticalCWE-328SHA-1

  src/rust/cryptography-key-parsing/src/pbe.rs:102

  SHA-256 or SHA3-256

  Raw evidence

  openssl::hash::MessageDigest::sha1(),

• CriticalCWE-328MD5

  src/rust/cryptography-crypto/src/pbkdf1.rs:96

  SHA3-256 or SHA-256

  Raw evidence

  openssl::hash::MessageDigest::md5(),

• CriticalCWE-3273DES / TripleDES

  src/cryptography/hazmat/primitives/ciphers/algorithms.py:27

  Raw evidence

  TripleDES as TripleDES,

+ 195 more findings in the full report