Home

DES or 3DES Used

Rule description

  • Neither DES (Data Encryption Standard) nor DESede (3DES) should be used

 

Non-compliant Code Example

DECLARE
  DES_EXAMPLE PLS_INTEGER := 0;
  
BEGIN
 DES_EXAMPLE := DBMS_CRYPTO.ENCRYPT_DES         --Non compliant code (DES (Data Encryption Standard) is used)
                                     + DBMS_CRYPTO.CHAIN_CBC
                                     + DBMS_CRYPTO.PAD_NONE;

END;
Visual Expert 2020
 VEPLSQLRULE2