rastray 0.15.0

Blazing-fast static analysis CLI for security, dependency, and performance audits.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

# RSTR-CRY-003 — DES / 3DES cipher

## Summary

DES (1977) and 3DES (1998) are both deprecated. DES has a 56-bit key —
brute-forceable in hours on modern hardware — and 3DES is vulnerable
to the **Sweet32** birthday attack against its 64-bit block size. NIST
disallowed 3DES for new applications in 2017 and removed all uses by
the end of 2023.

## Severity

`High`.

## Languages

Java, Kotlin, Python, Go.

## What rastray flags

- Java/Kotlin: `Cipher.getInstance("DES/...")` or `Cipher.getInstance("DESede/...")` / `"TripleDES/..."`.
- Python: `from Crypto.Cipher import DES, DES3` (PyCryptodome / PyCrypto).
- Go: `crypto/des` import or `des.NewCipher(...)` / `des.NewTripleDESCipher(...)`.

## What rastray deliberately does *not* flag

- AES-anything (the modern default).
- ChaCha20-Poly1305.

## How to fix it

Switch to AES-GCM (or ChaCha20-Poly1305 if AES-NI is unavailable):

```java
// Java
Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
```

```python
# Python (cryptography)
from cryptography.hazmat.primitives.ciphers.aead import AESGCM
aesgcm = AESGCM(key)             # 16/24/32-byte key
ct = aesgcm.encrypt(nonce, plaintext, aad)
```

```go
// Go
import "crypto/aes"; import "crypto/cipher"

block, _ := aes.NewCipher(key)
gcm, _   := cipher.NewGCM(block)
ct       := gcm.Seal(nil, nonce, plaintext, aad)
```

## References

- [NIST SP 800-67 Rev. 2 — disallowed status](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-67r2.pdf)
- [Sweet32 birthday attack](https://sweet32.info/)
- [CWE-327](https://cwe.mitre.org/data/definitions/327.html)