rspec/rules/S2257/description.adoc
Arseniy Zaostrovnykh 7ca29f686f Force linebreaks
2021-02-02 15:02:10 +01:00

5 lines
346 B
Plaintext

The use of a non-standard algorithm is dangerous because a determined attacker may be able to break the algorithm and compromise whatever data has been protected. Standard algorithms like ``++SHA-256++``, ``++SHA-384++``, ``++SHA-512++``, ... should be used instead.
This rule tracks creation of ``++java.security.MessageDigest++`` subclasses.