Crypto CustomMessageDigest
Implementing a custom MessageDigest is error-prone. National Institute of Standards and Technology(NIST) recommends the use of SHA-224, SHA-256, SHA-384, SHA-512, SHA-512/224, or SHA-512/256.
IndexedPublic repositoryMediumMedium confidenceVerifiedLGPL-3.0-onlykotlin
greprules fetch gitlab-sast-rules-lgpl-kotlin-crypto-rule-custommessagedigest --engine opengrepDescription
Implementing a custom MessageDigest is error-prone. National Institute of Standards and Technology(NIST) recommends the use of SHA-224, SHA-256, SHA-384, SHA-512, SHA-512/224, or SHA-512/256.
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.