public InsecureEncryptionAlgorithm() { using (var tripleDES = new MyTripleDESCryptoServiceProvider()) //Noncompliant { //... } using (var des = new DESCryptoServiceProvider()) //Noncompliant { //... } using (TripleDES TripleDESalg = TripleDES.Create()) //Noncompliant { } using (var des = DES.Create("fgdsgsdfgsd")) //Noncompliant { } using (var aes = new AesCryptoServiceProvider()) { //... } SymmetricAlgorithm des1 = SymmetricAlgorithm.Create("DES"); //Noncompliant des1 = SymmetricAlgorithm.Create("TripleDES"); //Noncompliant des1 = SymmetricAlgorithm.Create("3DES"); //Noncompliant }
public InsecureEncryptionAlgorithm() { using (var tripleDES = new MyTripleDESCryptoServiceProvider()) //Noncompliant {{Use the recommended AES (Advanced Encryption Standard) instead.}} // ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ { //... } using (var des = new DESCryptoServiceProvider()) //Noncompliant { //... } using (TripleDES TripleDESalg = TripleDES.Create()) //Noncompliant // ^^^^^^^^^^^^^^^^^^ { } using (var des = DES.Create("fgdsgsdfgsd")) //Noncompliant { } using (var aes = new AesCryptoServiceProvider()) { //... } SymmetricAlgorithm des1 = SymmetricAlgorithm.Create("DES"); //Noncompliant des1 = SymmetricAlgorithm.Create("TripleDES"); //Noncompliant des1 = SymmetricAlgorithm.Create("3DES"); //Noncompliant }