Merge pull request #16019 from p-/p--weak-enc-ecb-qhelp

C#: add hint regarding ECB to weak encryption QHelp
github · Mar 22, 2024 · f48e295 · f48e295
2 parents 01475fd + d62d68a
commit f48e295
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/csharp/ql/src/Security Features/WeakEncryption.qhelp b/csharp/ql/src/Security Features/WeakEncryption.qhelp
@@ -7,7 +7,7 @@
 
 </overview>
 <recommendation>
-<p>You should switch to a more secure encryption algorithm, such as AES (Advanced Encryption Standard) and use a key length which is reasonable for the application for which it is being used.</p>
+<p>You should switch to a more secure encryption algorithm, such as AES (Advanced Encryption Standard) and use a key length which is reasonable for the application for which it is being used. Do not use the ECB encryption mode since it is vulnerable to replay and other attacks.</p>
 
 </recommendation>
 <example>