Details

    • Type: Language-Specification
    • Status: Active
    • Resolution: Unresolved
    • Labels:
      None
    • Impact:
      Unknown 'null' severity
    • Likelihood:
      Unknown 'null' severity

      Description

      Questionable Code Example

      // === javax.crypto ===
      import javax.crypto.Cipher;
      Cipher c = Cipher.getInstance(...);  // Questionable
      
      // === apache.commons.crypto ===
      import java.util.Properties;
      import org.apache.commons.crypto.utils.Utils;
      import org.apache.commons.crypto.cipher.CryptoCipherFactory;
      import org.apache.commons.crypto.cipher.CryptoCipherFactory.CipherProvider;
      
      Properties properties = new Properties();
      properties.setProperty(CryptoCipherFactory.CLASSES_KEY, CipherProvider.OPENSSL.getClassName());
      final String transform = "AES/CBC/PKCS5Padding";
      Utils.getCipherInstance(transform, properties);  // Questionable
      

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              nicolas.harraudeau Nicolas Harraudeau
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: