Standard Library

GoCryptoAES

crypto/aes package. NewCipher() with a weak mode (ECB, CBC without IV) is a cryptographic weakness finding.

1 sink
Taint flow0 sources 1 sink
Sinks — dangerous call
.NewCipher()

Sinks

.NewCipher()Sink
#
Signature
NewCipher(key []byte) (cipher.Block, error)

Creates AES block cipher. Finding when used in ECB mode (no IV).

tracks:0

Fully-Qualified Names

FQNField
crypto/aesfqns[0]

Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.

Import

go.mod
// standard library — no go.mod entry required
rule.py
from codepathfinder.go_rule import GoCryptoAES