Skip to content

Cryptographic API Misuse Vulnerability: Do not use Inadequate key length #1

@gxx777

Description

@gxx777

Hello!
First and foremost, I would like to express my sincere gratitude for your contributions to this project.

Description:

I have identified a security vulnerability in the SupergirlOnCrypt v0.0.2 project by our cryptographic api misuse detection tool.The issue pertains to the use of a default RSA key length of 1024 bits, which is considered insecure due to advances in computing power and cryptographic weaknesses associated with shorter key lengths.

Affected Version

v0.0.2

References:

CWE-326: Inadequate Encryption Strength
NIST SP 800-131A r2

Location:

https://github.com/ThoughtfulDev/SupergirlOnCrypt/blob/master/App/RSA/RSAKeyGen.py#L7

Recommendations:

I recommend the following actions to mitigate the vulnerability:
Upgrade the RSA key length to a more secure option, such as 2048 bits.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions