Cryptography

PyCrypt

The crypt module (deprecated in 3.11, removed in 3.13). crypt.crypt() wraps the Unix crypt(3) call. Most default methods are weak (DES, MD5). Use passlib or hashlib.scrypt / pbkdf2_hmac instead.

1 sink
Taint flow0 sources 1 sink
Sinks — dangerous call
.crypt()

Sinks

.crypt()Sink
#
Signature
crypt.crypt(word, salt=None) -> str

Unix crypt password hashing. Finding — algorithm selection is platform-dependent and often weak.

Fully-Qualified Names

FQNField
cryptfqns[0]

Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.

Import

rule.py
from codepathfinder.go_rule import PyCrypt