38
Views
3
Comments
Solved
[CryptoAPI] .Net - Outdated library class
Question
cryptoapi
Service icon
Forge asset by João Barata
Application Type
Service

Hi Team,

I hope this message finds you well.

In our security scans we were able to identify that the CryptoBackend code (CryptoAPI/Source/NET/CryptoBackend.cs) is using an outdated .NET library class for cryptographically secure random generation (This was identified for version 2.2.1 and 2.2.2).

The class System.Security.Cryptography.RNGCryptoServiceProvider is stated to be obsolete according to the Microsoft documentation in favour of the RandomNumberGenerator static method from the same library.

Could you please let us know if there is any version update scheduled to update the above mentioned class?

Thank you in advance for your help.

Best Regards,

Guilherme Craveiro


2020-10-08 19-51-35
João Barata
Staff
Solution

Hi @Guilherme Craveiro,

Thank you for reporting the issue.

I've released a new version of the component that should have this problem addressed.

Regards,

UserImage.jpg
Guilherme Craveiro

Hi João,

Thank you for the update!

We will update to the latest version.

Best Regards,

Guilherme Craveiro

2024-10-12 12-11-20
Kerollos Adel
Champion

hallo @Guilherme Craveiro  i think you need to create your custom extension , we try to search many times before and at last i create custom one 

2020-10-08 19-51-35
João Barata
Staff
Solution

Hi @Guilherme Craveiro,

Thank you for reporting the issue.

I've released a new version of the component that should have this problem addressed.

Regards,

UserImage.jpg
Guilherme Craveiro

Hi João,

Thank you for the update!

We will update to the latest version.

Best Regards,

Guilherme Craveiro

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.