hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #20666 from owen-mc/go/promote-weak-crypto-algorithm

Browse Source 
Go: promote `go/weak-crypto-algorithm`
This commit is contained in:
Owen Mansel-Chan
2025-11-20 11:03:05 +00:00
committed by GitHub
parent 0f40b3ccb8 a70d74220f
commit 05085a8e82
40 changed files with 1485 additions and 430 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ruby/ql/src/queries/security/cwe-327/WeakSensitiveDataHashing.qhelp
View File

@@ -67,7 +67,7 @@
The following example shows two functions for checking whether the hash
of a certificate matches a known value -- to prevent tampering.
The first function uses MD5 that is known to be vulnerable to collision attacks.
The first function uses SHA-1 that is known to be vulnerable to collision attacks.
The second function uses SHA-256 that is a strong cryptographic hashing function.
</p>

2
ruby/ql/test/library-tests/security/CryptoAlgorithms.expected
View File

@@ -34,6 +34,8 @@ strongHashingAlgorithms
| SHA3256 |
| SHA3384 |
| SHA3512 |
| SHA512224 |
| SHA512256 |
| SHAKE128 |
| SHAKE256 |
| SM3 |