From 7967313e6116b7c31aed7e5da04a09e4388d25ad Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Thu, 26 Mar 2026 09:12:47 +0000
Subject: [PATCH] fix: resolve CodeQL alert #20 - Use of a broken or weak
 cryptographic algorithm

---
 vulnerable_weak_crypto.py | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/vulnerable_weak_crypto.py b/vulnerable_weak_crypto.py
index 5b8aca6..f362a27 100644
--- a/vulnerable_weak_crypto.py
+++ b/vulnerable_weak_crypto.py
@@ -15,8 +15,10 @@ def encrypt_data_des(data, key):
     return encrypted
 
 def encrypt_with_arc2(plaintext, key):
-    cipher = ARC2.new(key, ARC2.MODE_ECB)
-    return cipher.encrypt(plaintext)
+    from Crypto.Cipher import AES
+    cipher = AES.new(key, AES.MODE_GCM)
+    ciphertext, tag = cipher.encrypt_and_digest(plaintext)
+    return cipher.nonce + tag + ciphertext
 
 def generate_token():
     token = ""