Giters

blinksocks / blinksocks

A framework for building composable proxy protocol stack.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Bug Report：Usage of Outdated Encryption Algorithm and Fixed Initialization Vector

tianjk99 opened this issue · comments

commented

Some code snippets in the project use outdated encryption algorithms and fixed initialization vectors, which may lead to security vulnerabilities. It is recommended to improve the security and data integrity of the system by updating the encryption algorithm and initialization vector.

Using the non-random IV for CBC and CFB modes

  1. lib/presets/ssr-auth-aes128.js, line 100
  2. lib/presets/ssr-auth-chain.js, line 163

Using insecure symmetric-key algorithms: RC4

  1. lib/presets/ssr-auth-chain.js, line 173
  2. lib/presets/ssr-auth-chain.js, line 278
  3. lib/presets/ssr-auth-chain.js, line 391
  4. lib/presets/ssr-auth-chain.js, line 436

Using outdated encryption algorithms and fixed initialization vectors can lead to risks of data leakage, data tampering, and security vulnerabilities. Therefore, it is crucial to promptly update encryption algorithms and initialization vectors, and conduct security reviews to improve system security and data integrity.