Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add more insecure cryptography cipher algorithms #1185

Merged
merged 2 commits into from
Oct 7, 2024
Merged

Add more insecure cryptography cipher algorithms #1185

merged 2 commits into from
Oct 7, 2024

Commits on Oct 7, 2024

  1. Add more insecure cryptography cipher algorithms 

    The cryptography project has added a few more cipher algorithms
to its list of insecure, out-dated, or deprecated, i.e. decrepit
symmetric algorithms.

Namely, CAST5, SEED, and TripleDES were added. As a result, Bandit
should also alert to usage of these ciphers.

https://cryptography.io/en/latest/hazmat/decrepit/

Signed-off-by: Eric Brown <[email protected]>
    @ericwb
    ericwb committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    90f16c7 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'main' into more_ciphers

    @ericwb
    ericwb authored Oct 7, 2024
    Configuration menu
    Copy the full SHA
    f8d962e View commit details
    Browse the repository at this point in the history