Insecure encryption algorithm
Description
The application uses insecure encryption algorithms.
Impact
- Reverse the ciphertext and collect sensible information. - Tamper protected data by exploiting algorithm collisions.
Recommendation
Use algorithms considered cryptographically secure.
Threat
Anonymous attacker from adjacent network.
Expected Remediation Time
⏱️ 30 minutes.
Requirements
127 - Store hashed passwords148 - Set minimum size of asymmetric encryption149 - Set minimum size of symmetric encryption150 - Set minimum size for hash functions181 - Transmit data using secure protocols336 - Disable insecure TLS versionsRules
Ssl Tls Server Accepts Null Cipher SuiteSsl Tls Server Accepts Short Rsa KeySsl Tls Server Accepts Weak Cipher MethodsRust Insufficient Bcrypt CostGo Insufficient Kdf Output LengthJava Unsafe Jwt DecodeJavascript Weak Hmac HashJavascript Weak Rsa Modulus 1024Typescript Webcrypto Short Auth TagKotlin Short Gcm Auth TagRust Short Gcm Auth TagKotlin Crypto Weak Key SizeTypescript Insecure Ecdh CurveGo Insecure Hash UseKotlin Hardcoded Signing SecretC Sharp Hardcoded Insecure KeysScala Insecure Ec KeyRuby Rsa Legacy PaddingScala Insecure Hash AlgorithmScala Insecure Cipher ModeSwift Weak Hash AlgorithmC Sharp Weak Crypto AlgorithmPython Weak Hmac HashJavascript Weak Cipher Des EcbScala Weak Hmac HashKotlin Hardcoded Encryption KeyGo Weak Rsa Key SizeKotlin Static Iv UsedJava Insecure Cipher SslRuby Explicit Ecb ModePhp Weak Hmac HashRust Insecure Aes Cipher ModeGo Hardcoded Symmetric KeyC Sharp Obsolete Key DerivationJavascript Webcrypto Short Auth TagPhp Weak Cipher McryptKotlin Insecure Cipher ModeJavascript Insecure Hash Sha1Typescript Insecure Deprecated EncryptionJava Weak Hmac HashRuby Insecure Aes Cipher ModeTypescript Weak Hmac HashDart Pointycastle Pbkdf2 Weak IterationsRust Insecure Cipher AlgorithmScala Insecure Pass GenerationC Sharp Insecure Aes Cipher ModeKotlin Insecure Key GenerationJavascript Short Gcm Auth TagJavascript Insecure Encryption ModeTypescript Allow Invalid Key TypesKotlin Weak Key SizePython Hardcoded Jwt SecretPhp Rsa No PaddingJava Weak Rsa KeyKotlin Insecure Hostname VerificationDart Pointycastle Pbkdf2 Weak Key LengthPhp Short Gcm Auth TagGo Insecure Scrypt ParametersPython Insecure Hash Sha1 UsageRuby Short Gcm Auth TagDart Cryptography Argon2 Weak Hash LengthJava Insecure Signature AlgorithmPhp Explicit Ecb ModeGo Pbkdf2 Insufficient Iteration CountC Sharp Insecure Cipher AlgorithmJava Weak Cipher SuiteC Sharp Insecure Cipher ModeJava Jwt Unsigned TokenJavascript Weak Hash Md4Java Insecure Cryptographic AlgorithmKotlin Insecure Aes Cipher ModeJavascript Insecure Ec Curve Secp192k1Go Deprecated Pemblock Encryption FunctionsKotlin Hardcoded Iv UsedDart Cryptography Pbkdf2 Weak Key LengthScala Insecure Aes Cipher ModePhp Insecure Openssl CipherDart Pointycastle Argon2 Weak Hash LengthSwift Insecure Cryptor UsagerC Sharp Rsa Secure ModeDart Cryptography Argon2 Weak MemoryJava Weak Crypto AlgorithmsKotlin Weak Hmac HashKotlin Insecure Certificate ValidationRuby Rsa No PaddingDart Pointycastle Explicit Ecb ModeTypescript Insecure Hash Sha1Javascript Insecure Deprecated EncryptionPython Unsafe Cipher Algorithm Or ModeScala Jwt Without Proper SignTypescript Rsa No PaddingTypescript Rsa Legacy PaddingKotlin Insecure Cipher UsageProperties Missing Ssl ConfigurationC Sharp Disabled Strong CryptoPython Insecure Aes Ecb ModeJava Insecure Ssl ProtocolPython Rsa Legacy PaddingTypescript Insecure Hash Md4Javascript Allow Invalid Key TypesPython Short Gcm Auth TagPhp Rsa Legacy PaddingJava Insecure Cipher ModePhp Weak Encryption SizeGo Deprecated Encryption Function UseJava Pbkdf2 Insufficient Iteration CountGo Insecure Aes Cipher ModeProperties Weak Cipher SuiteDart Cryptography Pbkdf2 Weak IterationsSwift Insecure Cipher UsageJava Insecure Aes Cipher ModeTypescript Insecure Cipher CreationTypescript Insecure Rsa 1024Dart Pointycastle Weak Rsa Key SizeGo Insecure Cipher UsageC Sharp Insecure Hash UsageTypescript Weak Ec Curve Secp192k1Javascript Rsa No PaddingC Sharp Weak Rsa Encrypt PaddingJava Insecure Cipher UsageKotlin Insecure Key Pair GenerationJava Short Gcm Auth TagTypescript Short Gcm Auth TagGo Insufficient Bcrypt CostDart Pointycastle Argon2 Weak MemoryDart Cryptography Weak Rsa Key SizeTypescript Insecure Cipher ModeJava Allows Tls1 1Rust Insecure Hash AlgorithmKotlin Insecure Key UsageKotlin Insecure Cipher SslJava Insecure Hash AlgorithmJavascript Rsa Legacy PaddingKotlin Insecure Hash Sha1Scala Short Gcm Auth TagJava Weak Crypto Algorithms UsedSwift Hardcoded Jwt SecretJavascript Insecure Ecdh CurveC Sharp Hardcoded Symmetric KeyJava Insecure Key Rsa