gitlab.bandit.B304-8
385
Download Count*
License
Detected DES cipher algorithm which is considered insecure. The algorithm is considered weak and has been deprecated. Use AES instead.
Run Locally
Run in CI
Defintion
rules:
- id: bandit.B304-8
patterns:
- pattern-either:
- pattern: Cryptodome.Cipher.DES.new(...)
- pattern: Crypto.Cipher.DES.new(...)
message: >
Detected DES cipher algorithm which is considered insecure. The algorithm
is
considered weak and has been deprecated. Use AES instead.
metadata:
cwe: "CWE-327: Use of a Broken or Risky Cryptographic Algorithm"
owasp: "A3: Sensitive Data Exposure"
primary_identifier: bandit.B304-8
secondary_identifiers:
- name: Bandit Test ID B304
type: bandit_test_id
value: B304
license: MIT
severity: WARNING
languages:
- python
Short Link: https://sg.run/3AkW