This repository has been archived by the owner on Jun 7, 2023. It is now read-only.
Rats modules using outdated crypto library #710
Labels
help wanted
This is something we need some help with
Milestone
There are several modules in the
rats/
folder by @kevthehermit that are using a crypto library calledpycrypto
, mostly for AES and DES support. Unfortunately, this library hasn't been updated since 2014 and also has a vulnerable ElGamal implementation:https://nvd.nist.gov/vuln/detail/CVE-2018-6594
We should update these modules to make use of
cryptography
instead and droppycrypto
all together from our dependencies.The text was updated successfully, but these errors were encountered: