viper-framework/viper

Rats modules using outdated crypto library

オープン

#710 opened on 2018/10/14

 (2 件のコメント) (0 件のリアクション) (0 人の担当者)Python (372 件のフォーク)batch import
help wanted

Repository metrics

Stars
 (1,527 個のスター)
PR merge metrics
 (30d に merged PR はありません)

説明

There are several modules in the rats/ folder by @kevthehermit that are using a crypto library called pycrypto, mostly for AES and DES support. Unfortunately, this library hasn't been updated since 2014 and also has a vulnerable ElGamal implementation: https://nvd.nist.gov/vuln/detail/CVE-2018-6594

We should update these modules to make use of cryptography instead and drop pycrypto all together from our dependencies.

コントリビューターガイド