Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Use of Outdated and Insecure Algorithm DES-ECB to encrypt #736

Open
tianjk99 opened this issue Dec 8, 2023 · 0 comments
Open

Use of Outdated and Insecure Algorithm DES-ECB to encrypt #736

tianjk99 opened this issue Dec 8, 2023 · 0 comments

Comments

@tianjk99
Copy link

tianjk99 commented Dec 8, 2023

Please check if there is any problem with using DES-ECB to encrypt.

  1. lib/util/vncauth.js, line 35

This algorithm is known to have significant vulnerabilities that can be exploited by attackers, compromising the confidentiality and integrity of sensitive data. DES-ECB uses a fixed encryption key and does not incorporate an initialization vector (IV). As a result, it produces the same output for identical input blocks, making it susceptible to pattern recognition and exposing encrypted data patterns.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant