Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Added exception for ROT13

...

Weak cryptographic algorithms can be disabled in Java SE 7, see the Java PKI Programmer's Guide, Appendix D: Disabling Cryptographic Algorithms

Weak cryptographic algorithms may be used in scenarios that specifically call for a breakable cipher. For instance the ROT13 cipher is commonly used on bulletin boards and web sites when the purpose of encryption is protect people from the information, rather than protect information from the people.

Related Guidelines

MITRE 2009CWE ID 327 "Use of a Broken or Risky Cryptographic Algorithm"

...