Uploaded image for project: 'Rules Repository'
  1. Rules Repository
  2. RSPEC-2278 Neither DES (Data Encryption Standard) nor DESede (3DES) should be used
  3. RSPEC-4690

Python

    XMLWordPrintable

    Details

    • Type: Language-Specification
    • Status: Active
    • Resolution: Unresolved
    • Labels:
      None
    • Impact:
      Unknown 'null' severity
    • Likelihood:
      Unknown 'null' severity

      Description

      Noncompliant Code Example

      from pyDes import *

data = "content to be encrypted"
k = des("DESCRYPT", CBC, "\0\0\0\0\0\0\0\0", pad=None, padmode=PAD_PKCS5) // Noncompliant
d = k.encrypt(data)

      Compliant Solution

      import hashlib

m = hashlib.sha256() // Compliant
m.update(data)

d = m.hexdigest()

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            alexandre.gigleux Alexandre Gigleux
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated: