Skip to content

Commit d62d68a

Browse files
authored
C#: add hint regarding ECB to weak encryption QHelp
1 parent 69f6e1e commit d62d68a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

csharp/ql/src/Security Features/WeakEncryption.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77

88
</overview>
99
<recommendation>
10-
<p>You should switch to a more secure encryption algorithm, such as AES (Advanced Encryption Standard) and use a key length which is reasonable for the application for which it is being used.</p>
10+
<p>You should switch to a more secure encryption algorithm, such as AES (Advanced Encryption Standard) and use a key length which is reasonable for the application for which it is being used. Do not use the ECB encryption mode since it is vulnerable to replay and other attacks.</p>
1111

1212
</recommendation>
1313
<example>

0 commit comments

Comments
 (0)