| Detector: | MuDetect |
| Target: | project ' synthetic_jca ' versionjsl |
| Misuse: | misuse ' aes-ecb-mode ' |
| Tags: |
Details about the known misuse from the MUBench dataset.
| Description: | Using "AES" in Cipher.getInstance defaults to "AES/EBC/PKCS5Padding". The mode "EBC" is unsafe, hence the default "AES" should not be used. |
| Fix Description: | Use "AES/CBC/PKCS5Padding" since "CBC" is safe. |
| Violation Types: |
|
| In File: | mubench/examples/jca/Encrypting.java |
| In Method: | encrypt(byte[], byte[]) |
| Code with Misuse: |
|