Metadata

ID: csharp-security/use-standard-crypto

Language: C#

Severity: Error

Category: Security

CWE: 327

Related CWEs:

• 328
• 916
• 1240

Description

Implementing your hash/cryptographic algorithm may lead to errors and potential vulnerabilities. Always use proven algorithms that are available in the C# library ecosystem.

Non-Compliant Code Examples

public class CustomHash : HashAlgorithm {
}

Compliant Code Examples

public class MyClass {
    public void ComputeHash(byte[] data) {
        // Safe: using standard hash algorithm
        using (var sha256 = SHA256.Create()) {
            byte[] hash = sha256.ComputeHash(data);
        }
    }
}

원활한 통합. Datadog Code Security 사용해 보기

Datadog Code Security