Inadequate Encryption Strength
ID |
scala.cryptography.scala_crypto_rule_cipherdesedeinsecure |
Severity |
low |
Resource |
Cryptography |
Language |
Scala |
Description
Triple DES (also known as 3DES or DESede) is considered strong ciphers for modern applications. NIST recommends the usage of AES block ciphers instead of 3DES.
Rationale
Triple DES (also known as 3DES or DESede) is considered strong ciphers for modern applications. NIST recommends the usage of AES block ciphers instead of 3DES.
Remediation
Follow secure coding practices and review the references below for detailed remediation guidance.
References
-
OWASP Top 10 2021 - A02 : Cryptographic Failures.