RsDoctorrust-doctor · Security
weak-crypto-hash
Detect weak digests applied directly to secret-like values
- Severity
- warning
- Confidence
- medium
- Analyzer
- syn-ast
- Default policy
- Opt-in
Tags
Framework requirements
No framework requirement.
Limitations
- Syntactic analysis does not have rustc name resolution or inferred type information.
Remediation
Use a security-appropriate primitive and keep password hashing deliberately slow.
Fix capability: guidance