Application Uses Insecure Encryption Mechanisms Static analysis revealed the presence of cryptographically weak encryption algorithms.

[spdeol20]

trafficstars

Application Uses Insecure Encryption Mechanisms Static analysis revealed the presence of cryptographically weak encryption algorithms. "RSA/ECB/PKCS1Padding";

[vincetran]

Can you provide the report that claims this?

[spdeol20]

BSI organisation tested our app and they raised the issue in your sdk that you using weak encryption so I reported here we using your sdk for cognito and appsync

[harsh62]

Can you please provide detailed analysis to the team so that we can investigate further (as also requested above)?

• Code snippets
• Reports that you recieved
• Claims that the report has made.
• Suggestions from the report (if any)

The current information we have is not enough for us to further look into the issue.

[vincetran]

@spdeol20 Specifically when we've seen reports like this, it comes with the report that specifically calls out the class in question with an explanation of what the possible issue would be. The SDKs for Cognito and AppSync are large so we need more details in order to investigate.

[github-actions[bot]]

This issue is now closed. Comments on closed issues are hard for our team to see. If you need more assistance, please open a new issue that references this one.