Inadequate Encryption Strength
ID |
scala.cryptography.scala_crypto_rule_blowfishkeysize |
Severity |
low |
Resource |
Cryptography |
Language |
Scala |
Description
A small key size makes the ciphertext vulnerable to brute force attacks. At least 128 bits of entropy should be used when generating the key if use of Blowfish is required.
Rationale
A small key size makes the ciphertext vulnerable to brute force attacks. At least 128 bits of entropy should be used when generating the key if use of Blowfish is required.
Remediation
Follow secure coding practices and review the references below for detailed remediation guidance.
References
-
OWASP Top 10 2021 - A02 : Cryptographic Failures.