Weak Cipher

Vulnerable vs. safe

using var des = DES.Create();

using var aes = Aes.Create();

Why it matters & how to fix it

A weak/legacy block cipher (DES, Triple-DES, or RC2) is used. These have small block/key sizes and are not collision- or brute-force-resistant by modern standards (CWE-327). Use AES (AES-GCM for authenticated encryption) with a 256-bit key instead.

References

• https://cwe.mitre.org/data/definitions/327.html
• https://learn.microsoft.com/en-us/dotnet/standard/security/cryptographic-services

Related checks

• JavaScript / TypeScript - Cryptography
  Insecure Randomness For Secrets
• JavaScript / TypeScript - Cryptography
  Weak Cipher Algorithm
• JavaScript / TypeScript - Cryptography
  Weak Hash Algorithm
• Python - Cryptography
  Insecure Random Token
• Python - Cryptography
  Weak Cipher DES ECB
• Python - Cryptography
  Weak Hash MD5 SHA1