Closed ericwb closed 1 month ago
The cryptography project has added a few more cipher algorithms to its list of insecure, out-dated, or deprecated, i.e. decrepit symmetric algorithms.
Namely, CAST5, SEED, and TripleDES were added. As a result, Bandit should also alert to usage of these ciphers.
https://cryptography.io/en/latest/hazmat/decrepit/
The cryptography project has added a few more cipher algorithms to its list of insecure, out-dated, or deprecated, i.e. decrepit symmetric algorithms.
Namely, CAST5, SEED, and TripleDES were added. As a result, Bandit should also alert to usage of these ciphers.
https://cryptography.io/en/latest/hazmat/decrepit/