mirror of
https://github.com/github/codeql.git
synced 2025-12-16 16:53:25 +01:00
Removing WeakRSA, this is redundant with weak asymmetric key size.
This commit is contained in:
@@ -1,24 +0,0 @@
|
||||
/**
|
||||
* @name Cipher is Weak RSA Implementation
|
||||
* @id java/quantum/weak-rsa
|
||||
* @description RSA with a key length <2048 found
|
||||
* @kind problem
|
||||
* @problem.severity error
|
||||
* @tags quantum
|
||||
* experimental
|
||||
*/
|
||||
|
||||
import experimental.quantum.Language
|
||||
|
||||
class WeakRsaAlgorithmNode extends Crypto::KeyOperationAlgorithmNode {
|
||||
WeakRsaAlgorithmNode() {
|
||||
this.getAlgorithmType() = Crypto::KeyOpAlg::TAsymmetricCipher(Crypto::KeyOpAlg::RSA()) and
|
||||
this.getKeySizeFixed() < 2048
|
||||
}
|
||||
}
|
||||
|
||||
from Crypto::KeyOperationNode op, string message
|
||||
where
|
||||
op.getAKnownAlgorithm() instanceof WeakRsaAlgorithmNode and
|
||||
message = "Weak RSA instance found with key length <2048"
|
||||
select op, message
|
||||
Reference in New Issue
Block a user