Weak cryptographic algorithms: crypto/md5, crypto/sha1, crypto/des, crypto/rc4. All New() and Sum() calls are findings — these algorithms are cryptographically broken.
.New().Sum()| FQN | Field | |
|---|---|---|
| crypto/sha256 | fqns[0] | |
| crypto/sha512 | fqns[1] | |
| crypto/hmac | fqns[2] | |
| crypto/aes | fqns[3] | |
| sha256.* | patterns | |
| sha512.* | patterns | |
| hmac.* | patterns |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
// standard library — no go.mod entry required
from codepathfinder.go_rule import GoCrypto