C#


ROSLYN.SECURITY.CA5402 : Use CreateEncryptor with the default IV (C#)

See Roslyn-Detected C# Warning Classes for more information.

Summary

Symmetric encryption should always use a non-repeatable initialization vector to prevent dictionary attacks.

This check corresponds to Roslyn rule CA5402. For full rule details, see the Microsoft website: CA5402.

Properties

Class Name Use CreateEncryptor with the default IV (C#)
Significance security
Mnemonic ROSLYN.SECURITY.CA5402
Categories None
Availability Available for C# only.
Enabling Checks for this warning class are disabled by default. To enable them, add the following WARNING_FILTER rule to the project configuration file.
WARNING_FILTER += allow class="Use CreateEncryptor with the default IV  (C#)"

Relevant Configuration File Parameters

The following configuration file parameters affect checks for this warning class.