gitlab.bandit.B304-8

385
Download Count*
MIT
License

Detected DES cipher algorithm which is considered insecure. The algorithm is considered weak and has been deprecated. Use AES instead.

Run Locally

Run in CI

Semgrep CI docs

Defintion

Edit RuleView Source
Open in Playground 
rules:
  - id: bandit.B304-8
    patterns:
      - pattern-either:
          - pattern: Cryptodome.Cipher.DES.new(...)
          - pattern: Crypto.Cipher.DES.new(...)
    message: >
      Detected DES cipher algorithm which is considered insecure. The algorithm
      is

      considered weak and has been deprecated. Use AES instead.
    metadata:
      cwe: "CWE-327: Use of a Broken or Risky Cryptographic Algorithm"
      owasp: "A3: Sensitive Data Exposure"
      primary_identifier: bandit.B304-8
      secondary_identifiers:
        - name: Bandit Test ID B304
          type: bandit_test_id
          value: B304
      license: MIT
    severity: WARNING
    languages:
      - python