Build cryptographic cipher inventory

Proprietary

Builds a cipher inventory for Keyfactor AgileSec by detecting insecure cryptographic algorithm usages across Java (JCA/JCE and BouncyCastle), C# (.NET) and C/C++ (OpenSSL) sources. Every detection is recorded in the shared cipher inventory data table with the algorithm, its function, the library and language, the precise source location, and repository provenance. Phase 1 covers DES, 3DES, RC2, RC4, Blowfish, MD2, MD4, MD5, SHA1 and HMAC-SHA1.

io.moderne.cryptography.agilesec.BuildCipherInventory
mod run . --recipe=io.moderne.cryptography.agilesec.BuildCipherInventory

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.

Recipe list

It runs these recipes, in this order.

  1. Find insecure Java cryptography
  2. Find insecure C# cryptography
  3. Find insecure C/C++ cryptography