Uploaded image for project: 'SonarPLSQL'
  1. SonarPLSQL
  2. SONARPLSQL-699

Rule S2278: Neither DES (Data Encryption Standard) nor DESede (3DES) should be used

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.3
    • Component/s: Rules
    • Labels:
      None

      Description

      Case DBMS_CRYPTO:

      This rule raises an issue each time the following constants are used ENCRYPT_DES, ENCRYPT_3DES, ENCRYPT_3DES_2KEY.

      Case DBMS_OBFUSCATION_TOOLKIT

      This rule raises an issue when DBMS_OBFUSCATION_TOOLKIT's procedures are used:

      • DBMS_OBFUSCATION_TOOLKIT.DES3Encrypt
      • DBMS_OBFUSCATION_TOOLKIT.DES3DECRYPT
      • DBMS_OBFUSCATION_TOOLKIT.DES3GetKey
      • DBMS_OBFUSCATION_TOOLKIT.DESDecrypt
      • DBMS_OBFUSCATION_TOOLKIT.DESEncrypt
      • DBMS_OBFUSCATION_TOOLKIT.DESGetKey

      References:

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              andrea.guarino Andrea Guarino
              Reporter:
              alexandre.gigleux Alexandre Gigleux
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Due:
                Created:
                Updated:
                Resolved: