EteSyncAndroid05.md

CogniCrypt (report 12) for EteSync

• Class: okio.SegmentedByteString

• Method: digest$okio

• Line: 52

• Issue details: ConstraintError-8

  • ConstraintError violating CrySL rule for java.security.MessageDigest.

  • First parameter (with value \MD5) should be any of {SHA-256, SHA-384, SHA-512}.

Code

• Not available. Perhaps it resides in an external library.

Questions

1. How likely might this warning in a third-party library reveal a security threat to this app?

   a. Very unlikely;

   b. Unlikely;

   c. I cannot evaluate this;

   d. Likely;

   e. Very likely;