== Why is this an issue? include::../description.adoc[] === Noncompliant code example https://nodejs.org/api/crypto.html[crypto] built-in module: [source,javascript] ---- crypto.createCipheriv("DES", key, iv); // Noncompliant: DES / 3DES is unsecure crypto.createCipheriv("DES-EDE", key, ""); // Noncompliant: DES / 3DES is unsecure crypto.createCipheriv("DES-EDE3", key, ""); // Noncompliant: DES / 3DES is unsecure crypto.createCipheriv("RC2", key, iv); // Noncompliant: RC2 is vulnerable to a related-key attack crypto.createCipheriv("RC4", key, "");// Noncompliant: RC4 is vulnerable to several attacks crypto.createCipheriv("BF", key, iv);// Noncompliant: Blowfish use a 64-bit block size makes it vulnerable to birthday attacks ---- === Compliant solution https://nodejs.org/api/crypto.html[crypto] built-in module: [source,javascript] ---- crypto.createCipheriv("AES-256-GCM", key, iv); ---- include::../see.adoc[] ifdef::env-github,rspecator-view[] ''' == Implementation Specification (visible only on this page) include::../message.adoc[] ''' == Comments And Links (visible only on this page) include::../comments-and-links.adoc[] endif::env-github,rspecator-view[]