AInventory
Where is the vulnerable cryptography?
RSA and elliptic curves are buried in application code, dependencies and binaries. Pattern-based scanners see direct calls, but far less the indirect paths and home-grown implementations.
- Direct calls
- Seen by pattern scanners
- Indirect paths
- Far less visible
- Home-grown implementations
- Far less visible