securego / gosec

Go security checker
https://securego.io
Apache License 2.0
7.71k stars 606 forks source link

Add rules for deprecated hashing algorithms #1162

Closed expp121 closed 2 months ago

expp121 commented 2 months ago

Summary

Discourage the use of old (and weak) algorithms.

Expected behavior

It would be beneficial in my opinion if gosec also had rules which discourage the use of deprecated libraries. And also to add to the weak hashing algorithms. I am offering the additions of MD4 and RIPEMD160 as deprecated weak hashing algorithms.

Actual behavior

No rules exist for this purpose.