search

onaio / steps-app

WHO STEPS App
Apache License 2.0
2 stars 2 forks source link

Replace MD5 with SHA-256 #200

Closed bkimondiu closed 2 years ago

bkimondiu commented 2 years ago

MD5 is a weak hash known to have hash collisions.

Standards

CWE: CWE-327: Use of a Broken or Risky
Cryptographic Algorithm 
OWASP Top 10: M5: Insufficient Cryptography 
OWASP MASVS: MSTG-CRYPTO-4

Files

com/onaio/steps/helper/AuthDialog.java 
com/onaio/steps/utils/QRCodeUtils.java