pyca/cryptography

Principais findings

• CríticoCWE-3273DES / TripleDES

  src/cryptography/hazmat/decrepit/ciphers/algorithms.py:49

  Evidência

  "Two-key TripleDES (16-byte keys) is deprecated and "

• CríticoCWE-327SSLv2 / SSLv3

  src/_cffi_src/openssl/ssl.py:58

  Evidência

  static const long SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER;

• CríticoCWE-328SHA-1

  src/rust/cryptography-key-parsing/src/pbe.rs:102

  SHA-256 or SHA3-256

  Evidência

  openssl::hash::MessageDigest::sha1(),

• CríticoCWE-328MD5

  src/rust/cryptography-crypto/src/pbkdf1.rs:96

  SHA3-256 or SHA-256

  Evidência

  openssl::hash::MessageDigest::md5(),

• CríticoCWE-3273DES / TripleDES

  src/cryptography/hazmat/primitives/ciphers/algorithms.py:27

  Evidência

  TripleDES as TripleDES,

+ 195 findings no relatório completo