
JDang658522 (Community Member) asked a question.
I got a work order to fix some security flaws like below, but I don't know what I need to do.
Can you someone give me a few hints?
Description
Insufficiently strong encryption schemes may not adequately secure secret data from attackers. This can result from poor cipher selection, insufficient key size, or weak key selection.
Recommendations
Use a cryptographic algorithm that has been subject to public scrutiny. Follow security best practices when selecting key sizes and when generating key material.
flawId 591 myLib.dll byte[] Decrypt(byte[], byte[], byte[], int) 58%
flawId 590 myLib.dll byte[] Encrypt(byte[], byte[], byte[], byte[]) 33%
.png)
Hello
I would recommend you contact our technical support team. Here's how you can log a case:
1. Navigate to the upper right corner of any page in the Community, and click on your user avatar.
2. Select Contact Support from the drop-down menu.Open a case with Support, for static analysis and provide the steps you are taking to receive that error to better help assist the engineer.
Regards,
Pranita
Veracode Inc.