| Title | https://github.com/calmkart Django-sso-server master CWE-326: Inadequate Encryption Strength |
|---|
| Description | In file common/crypto.py
```common/crypto.py
def gen_rsa_keys(self):
rsa = RSA.generate(1024, self.random_generator)
private_pem = rsa.exportKey()
public_pem = rsa.publickey().exportKey()
return (private_pem, public_pem)
```
CWE-326: Inadequate Encryption Strength
+ Description
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
|
|---|
| Source | ⚠️ https://github.com/calmkart/Django-sso-server |
|---|
| User | dev03303 (UID 85336) |
|---|
| Submission | 05/15/2025 10:26 (1 Year ago) |
|---|
| Moderation | 05/17/2025 11:55 (2 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 309448 [calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15 common/crypto.py gen_rsa_keys inadequate encryption] |
|---|
| Points | 20 |
|---|