PyCQA / bandit

Bandit is a tool designed to find common security issues in Python code.
https://bandit.readthedocs.io
Apache License 2.0
6.5k stars 610 forks source link

Add more insecure cryptography cipher algorithms #1185

Closed ericwb closed 1 month ago

ericwb commented 1 month ago

The cryptography project has added a few more cipher algorithms to its list of insecure, out-dated, or deprecated, i.e. decrepit symmetric algorithms.

Namely, CAST5, SEED, and TripleDES were added. As a result, Bandit should also alert to usage of these ciphers.

https://cryptography.io/en/latest/hazmat/decrepit/