Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use of Outdated and Insecure Algorithm DES-ECB to encrypt #736

Open
tianjk99 opened this issue Dec 8, 2023 · 0 comments
Open

Use of Outdated and Insecure Algorithm DES-ECB to encrypt #736

tianjk99 opened this issue Dec 8, 2023 · 0 comments

Comments

@tianjk99
Copy link

tianjk99 commented Dec 8, 2023

Please check if there is any problem with using DES-ECB to encrypt.

  1. lib/util/vncauth.js, line 35

This algorithm is known to have significant vulnerabilities that can be exploited by attackers, compromising the confidentiality and integrity of sensitive data. DES-ECB uses a fixed encryption key and does not incorporate an initialization vector (IV). As a result, it produces the same output for identical input blocks, making it susceptible to pattern recognition and exposing encrypted data patterns.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant