How to fix Risky cryptographic function in asp.net application?

Sana, Ramesh 20

How to fix Risky cryptographic function in asp.net application? Can we give generic solution?

P a u l 10,406 Reputation points

2023-07-26T20:50:34.94+00:00

Can you provide an example of a risky function and we can advise around that?
Lan Huang-MSFT 26,761 Reputation points Microsoft Vendor

2023-07-27T09:28:45.1066667+00:00

Hi @Sana, Ramesh,

According to Microsoft documentation:

Broken cryptographic algorithms are not considered secure and their use should be discouraged. The MD5 hash algorithm is susceptible to known collision attacks, though the specific vulnerability will vary based on the context of use.

How to fix violations:

Use cryptographically stronger options:

For MD5, use hashes in the SHA-2 family (for example, SHA512, SHA384, SHA256).

For DES and RC2, use Aes encryption.

For specific details, you can check the documentation:

https://learn.microsoft.com/en-us/dotnet/fundamentals/code-analysis/quality-rules/ca5351

Sana, Ramesh 20

private const string abckey ="n46ASg.Es9832537";


private void SetKeys()
        {
            if (m_Key == null)
            {
                m_Key = xyz(abckey );
            }
         }

//xvz() method is getting the values interm of Bytes
//I need fix cryptographic function vulnerability here  
@paul

Sana, Ramesh 20 Reputation points

2023-07-28T18:04:35.4833333+00:00

Can I get sample solution please?
PatriceSc 166 Reputation points

2023-07-31T13:09:23.52+00:00

Hi,

And what does xyz ? What is the exact compiler or tool message that you have ?

For now we don't know yet exactly what your code does and which problem you have so it's hard to suggest how to fix your still quite vague issue.

Share via

How to fix Risky cryptographic function in asp.net application?