rspec/rules/S2257/description.adoc

5 lines
346 B
Plaintext
Raw Normal View History

2021-01-27 13:42:22 +01:00
The use of a non-standard algorithm is dangerous because a determined attacker may be able to break the algorithm and compromise whatever data has been protected. Standard algorithms like ``++SHA-256++``, ``++SHA-384++``, ``++SHA-512++``, ... should be used instead.
2021-02-02 15:02:10 +01:00
2021-01-27 13:42:22 +01:00
This rule tracks creation of ``++java.security.MessageDigest++`` subclasses.