diff --git a/ruby/ql/src/queries/security/cwe-327/BrokenCryptoAlgorithm.qhelp b/ruby/ql/src/queries/security/cwe-327/BrokenCryptoAlgorithm.qhelp index cede4e735d5..d793312c45d 100644 --- a/ruby/ql/src/queries/security/cwe-327/BrokenCryptoAlgorithm.qhelp +++ b/ruby/ql/src/queries/security/cwe-327/BrokenCryptoAlgorithm.qhelp @@ -13,6 +13,12 @@ algorithm means that encrypted or hashed data is less secure than it appears to be.
+
+ This query alerts on any use of a weak cryptographic algorithm, that is
+ not a hashing algorithm. Use of broken or weak cryptographic hash
+ functions are handled by the
+ rb/weak-sensitive-data-hashing query.
+