mastg-android-weak-encryption-modes.yaml

rules:
  - id: weak-encryption-modes
    languages:
      - java
    severity: WARNING
    metadata:
      summary: This rule looks for weak encryption modes.
    message: "[MASVS-CRYPTO-1] Weak encryption modes found in use."
    pattern-either:
      - pattern: Cipher.getInstance("AES")
      - pattern-regex: Cipher\.getInstance\("?[A-Za-z0-9]+/ECB(/[A-Za-z0-9]+)?"?\)