pyca/cryptography

Top findings

• CriticalCWE-327RC2

  src/cryptography/hazmat/decrepit/ciphers/algorithms.py:135

  Raw evidence

  class RC2(BlockCipherAlgorithm):

• CriticalCWE-328MD5

  src/cryptography/hazmat/_oid.py:131

  SHA3-256 or SHA-256

  Raw evidence

  SignatureAlgorithmOID.RSA_WITH_MD5: hashes.MD5(),

• CriticalCWE-328SHA-1

  src/rust/cryptography-key-parsing/src/pbe.rs:102

  SHA-256 or SHA3-256

  Raw evidence

  openssl::hash::MessageDigest::sha1(),

• CriticalCWE-328SHA-1

  src/rust/cryptography-crypto/src/pkcs12.rs:134

  SHA-256 or SHA3-256

  Raw evidence

  ("sesame", b"\xff\xff\xff\xff\xff\xff\xff\xff", KDF_ENCRYPTION_KEY_ID, 2048, 24, openssl::hash::MessageDigest::sha1(), b"\x7c\xd9\xfd\x3e\x2b\x3b\xe7\x69\x1a\x44\xe3\xbe\xf0\xf9\xea\x0f\xb9\xb8\x97\xd

• CriticalCWE-3273DES / TripleDES

  src/cryptography/hazmat/primitives/ciphers/algorithms.py:27

  Raw evidence

  TripleDES as TripleDES,

+ 195 more findings in the full report