class

Flaw::HardcodedIv

Inherits Flaw::Rule < Reference < Object

FLAW021 — Hardcoded IV / nonce / salt. Destroys confidentiality in CTR and AEAD modes; breaks key-derivation uniqueness.

Constants

NAMED = /\b(iv|nonce|salt)\s*=\s*(?:"([^"]{8,})"|Bytes\[[^\]]+\]|Slice\[[^\]]+\])/i

iv = "abcdef..." / nonce = Bytes[0, 1, 2, ...] / salt = "..."

Instance methods

check(source : String, path : String) : Array(Finding)
Source
default_severity
Source
description
Source
title
Source