org.sonar.l10n.py.rules.python.S2257.html Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of python-checks Show documentation

There is a newer version: 4.23.0.17664

The use of a non-standard algorithm is dangerous because a determined attacker may be able to break the algorithm and compromise whatever data has
been protected. Standard algorithms like Argon2PasswordHasher, BCryptPasswordHasher, … should be used instead.
This rule tracks creation of BasePasswordHasher subclasses for Django applications.
Recommended Secure Coding Practices

   Use a standard algorithm instead of creating a custom one. 

Sensitive Code Example
class CustomPasswordHasher(BasePasswordHasher):  # Sensitive
    # ...

See

   OWASP - Top 10 2021 Category A2 - Cryptographic Failures 
   OWASP - Top 10 2017 Category A3 - Sensitive Data
  Exposure 
   CWE - CWE-327 - Use of a Broken or Risky Cryptographic Algorithm