Giters

Tencent / VasSonic

VasSonic is a lightweight and high-performance Hybrid framework developed by tencent VAS team, which is intended to speed up the first screen of websites working on Android and iOS platform.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Weak Cryptographic Hash

QiAnXinCodeSafe opened this issue · comments

commented

VasSonic/sonic-android/sdk/src/main/java/com/tencent/sonic/sdk/SonicUtils.java

Line 688 in 59936be

MessageDigest sha1 = MessageDigest.getInstance("SHA1");

VasSonic/sonic-android/sdk/src/main/java/com/tencent/sonic/sdk/SonicUtils.java

Line 701 in 59936be

MessageDigest sha1 = MessageDigest.getInstance("MD5");

Weak cryptographic hashes cannot guarantee data integrity and should not be used in security-critical contexts.