SEC023
Weak encryption algorithm
Object Pascal — Delphi & Free Pascal
Warning
Security
DES, RC4, and Blowfish are cryptographically broken and offer inadequate protection
DES, RC4, and Blowfish are cryptographically broken and offer inadequate protection.
Why this severity
DES, RC4, and Blowfish are cryptographically broken and offer inadequate protection.
Known false positives
legacy decryption paths needed to migrate old data to a stronger cipher.
Remediation example
Cipher := TAES.Create; Cipher.KeySize := 256;