2023-05-03 11:06:20 +02:00
|
|
|
|
2023-06-20 17:36:01 +02:00
|
|
|
include::../summary.adoc[]
|
2021-02-02 15:02:10 +01:00
|
|
|
|
2023-06-20 17:36:01 +02:00
|
|
|
== Why is this an issue?
|
2020-06-30 12:49:37 +02:00
|
|
|
|
2023-06-20 17:36:01 +02:00
|
|
|
include::../rationale.adoc[]
|
2021-02-02 15:02:10 +01:00
|
|
|
|
2023-06-20 17:36:01 +02:00
|
|
|
include::../impact.adoc[]
|
2020-06-30 12:49:37 +02:00
|
|
|
|
2023-06-20 17:36:01 +02:00
|
|
|
// How to fix it section
|
2021-02-02 15:02:10 +01:00
|
|
|
|
2024-01-25 15:18:07 +01:00
|
|
|
include::how-to-fix-it/java-cryptography-extension.adoc[]
|
2020-06-30 12:49:37 +02:00
|
|
|
|
2023-06-20 17:36:01 +02:00
|
|
|
include::how-to-fix-it/okhttp.adoc[]
|
2021-04-26 17:29:13 +02:00
|
|
|
|
2023-06-20 17:36:01 +02:00
|
|
|
== Resources
|
2020-06-30 12:49:37 +02:00
|
|
|
|
2023-06-20 17:36:01 +02:00
|
|
|
include::../common/resources/docs.adoc[]
|
2020-06-30 12:49:37 +02:00
|
|
|
|
2023-06-20 17:36:01 +02:00
|
|
|
include::../common/resources/articles.adoc[]
|
2020-06-30 12:49:37 +02:00
|
|
|
|
2023-06-20 17:36:01 +02:00
|
|
|
include::../common/resources/presentations.adoc[]
|
2020-06-30 12:49:37 +02:00
|
|
|
|
2023-06-20 17:36:01 +02:00
|
|
|
include::../common/resources/standards.adoc[]
|
2023-06-22 10:38:01 +02:00
|
|
|
|
2024-08-08 09:50:21 +02:00
|
|
|
* OWASP - https://mas.owasp.org/checklists/MASVS-CRYPTO/[Mobile AppSec Verification Standard - Cryptography Requirements]
|
2024-01-15 17:15:56 +01:00
|
|
|
* OWASP - https://owasp.org/www-project-mobile-top-10/2016-risks/m5-insufficient-cryptography[Mobile Top 10 2016 Category M5 - Insufficient Cryptography]
|
|
|
|
|
* CWE - https://cwe.mitre.org/data/definitions/327[CWE-327 - Use of a Broken or Risky Cryptographic Algorithm]
|
2023-06-20 17:36:01 +02:00
|
|
|
* https://wiki.sei.cmu.edu/confluence/x/hDdGBQ[CERT, MSC61-J.] - Do not use insecure or weak cryptographic algorithms
|
2021-06-02 20:44:38 +02:00
|
|
|
|
2021-06-03 09:05:38 +02:00
|
|
|
ifdef::env-github,rspecator-view[]
|
2021-09-20 15:38:42 +02:00
|
|
|
|
|
|
|
|
'''
|
|
|
|
|
== Implementation Specification
|
|
|
|
|
(visible only on this page)
|
|
|
|
|
|
|
|
|
|
include::../message.adoc[]
|
|
|
|
|
|
2023-06-20 17:36:01 +02:00
|
|
|
=== Highlighting
|
|
|
|
|
|
|
|
|
|
`SSLContext.getInstance` invocation
|
2021-09-20 15:38:42 +02:00
|
|
|
|
2021-06-08 15:52:13 +02:00
|
|
|
'''
|
2021-06-02 20:44:38 +02:00
|
|
|
== Comments And Links
|
|
|
|
|
(visible only on this page)
|
|
|
|
|
|
|
|
|
|
include::../comments-and-links.adoc[]
|
2023-06-20 17:36:01 +02:00
|
|
|
|
2021-06-03 09:05:38 +02:00
|
|
|
endif::env-github,rspecator-view[]
|
