25 lines
676 B
Plaintext
25 lines
676 B
Plaintext
|
include::../description.adoc[]
|
||
|
|
|
||
|
|
include::../ask-yourself.adoc[]
|
||
|
|
|
||
|
|
include::../recommended.adoc[]
|
||
|
|
|
||
|
|
== Sensitive Code Example
|
||
|
|
|
||
|
|
----
|
||
|
|
var hashProvider1 = new MD5CryptoServiceProvider(); // Sensitive
|
||
|
|
var hashProvider2 = (HashAlgorithm)CryptoConfig.CreateFromName("MD5"); // Sensitive
|
||
|
|
var hashProvider3 = new SHA1Managed(); // Sensitive
|
||
|
|
var hashProvider4 = HashAlgorithm.Create("SHA1"); // Sensitive
|
||
|
|
----
|
||
|
|
|
||
|
|
== Compliant Solution
|
||
|
|
|
||
|
|
----
|
||
|
|
var hashProvider1 = new SHA256Managed(); // Compliant
|
||
|
|
var hashProvider2 = (HashAlgorithm)CryptoConfig.CreateFromName("SHA256Managed"); // Compliant
|
||
|
|
var hashProvider3 = HashAlgorithm.Create("SHA256Managed"); // Compliant
|
||
|
|
----
|
||
|
|
|
||
|
|
include::../see.adoc[]
|