Audit required: Switch to a better crypto algorithm CS-A1002

One or more crypto algorithms such as TripleDESCryptoServiceProvider, DESCryptoServiceProvider, and RC2CryptoServiceProvider are being used by your application. These algorithms are marked as obsolete and are no longer recommended. Please consider switching to a more modern and robust algorithm instead. Please check out the reference for some recommended algorithms.

Bad Practice

var des = new DESCryptoServiceProvider();

Recommended

using (var aes = Aes.Create())
{
    //
}

Reference

• A02:2021 - Cryptographic Failures
• CWE-327: Use of a Broken or Risky Cryptographic Algorithm
• .NET cryptography model