Applications use outdated algorithms (DES, RC4), insecure modes (ECB), or mismanage IVs/nonces (static, reused), enabling easy decryption. AI models suggest these weak practices from older tutorials, leading to data breaches and compliance failures.
The anti-pattern involves using cryptographic techniques that are no longer considered secure for protecting sensitive data.
Using algorithms like DES, 3DES, or RC4 is a critical flaw. These algorithms have known vulnerabilities and are easily broken with modern computing power.
Antipatrón de seguridad para cifrado débil (CWE-326, CWE-327). Utilícelo al generar o revisar código que cifra datos, maneja claves de cifrado o utiliza modos criptográficos. Detecta DES, modo ECB, IV estáticos e implementaciones criptográficas personalizadas. Fuente: igbuend/grimbard.