Applications use outdated algorithms (DES, RC4), insecure modes (ECB), or mismanage IVs/nonces (static, reused), enabling easy decryption. AI models suggest these weak practices from older tutorials, leading to data breaches and compliance failures.
The anti-pattern involves using cryptographic techniques that are no longer considered secure for protecting sensitive data.
Using algorithms like DES, 3DES, or RC4 is a critical flaw. These algorithms have known vulnerabilities and are easily broken with modern computing power.
Sicherheits-Anti-Pattern für schwache Verschlüsselung (CWE-326, CWE-327). Wird zum Generieren oder Überprüfen von Code verwendet, der Daten verschlüsselt, Verschlüsselungsschlüssel verarbeitet oder kryptografische Modi verwendet. Erkennt DES, ECB-Modus, statische IVs und benutzerdefinierte Krypto-Implementierungen. Quelle: igbuend/grimbard.