Skip to content

Commit 90db349

Browse files
committed
State that ruby broken crypto algo doesn't deal with hashing
1 parent 2918d30 commit 90db349

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

ruby/ql/src/queries/security/cwe-327/BrokenCryptoAlgorithm.qhelp

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,12 @@
1313
algorithm means that encrypted or hashed data is less
1414
secure than it appears to be.
1515
</p>
16+
<p>
17+
This query alerts on any use of a weak cryptographic algorithm, that is
18+
not a hashing algorithm. Use of broken or weak cryptographic hash
19+
functions are handled by the
20+
<code>rb/weak-sensitive-data-hashing</code> query.
21+
</p>
1622
</overview>
1723
<recommendation>
1824
<p>

0 commit comments

Comments
 (0)