Insecure-crypto-rsa-keysize
Insecure crypto rsa keysize
insecure-crypto-rsa-keysize
insecure-crypto-rsa-keysize
RSA key generation was identified where the key size was less than the industry standard recommendation of 2048 bits minimum. Use a key strength of at least 2048 bit, or stronger where appropriate.
Likelihood: LOW
Confidence: HIGH
CWE:
- CWE-326: Inadequate Encryption Strength
OWASP:
- A03:2017 - Sensitive Data Exposure
- A02:2021 - Cryptographic Failures