Rule S2278: Neither DES (Data Encryption Standard) nor DESede (3DES) should be used

Case DBMS_CRYPTO:

This rule raises an issue each time the following constants are used ENCRYPT_DES, ENCRYPT_3DES, ENCRYPT_3DES_2KEY.

Case DBMS_OBFUSCATION_TOOLKIT

This rule raises an issue when DBMS_OBFUSCATION_TOOLKIT's procedures are used:

• DBMS_OBFUSCATION_TOOLKIT.DES3Encrypt
• DBMS_OBFUSCATION_TOOLKIT.DES3DECRYPT
• DBMS_OBFUSCATION_TOOLKIT.DES3GetKey
• DBMS_OBFUSCATION_TOOLKIT.DESDecrypt
• DBMS_OBFUSCATION_TOOLKIT.DESEncrypt
• DBMS_OBFUSCATION_TOOLKIT.DESGetKey

References:

• https://docs.oracle.com/cd/B19306_01/appdev.102/b14258/d_crypto.htm#i1004145
• https://docs.oracle.com/cd/B19306_01/appdev.102/b14258/d_obtool.htm#i1003449