Removing WeakRSA, this is redundant with weak asymmetric key size.

This commit is contained in:
REDMOND\brodes
2025-10-17 13:39:05 -04:00
parent b4ecb91c83
commit 1b205d8673

View File

@@ -1,24 +0,0 @@
/**
* @name Cipher is Weak RSA Implementation
* @id java/quantum/weak-rsa
* @description RSA with a key length <2048 found
* @kind problem
* @problem.severity error
* @tags quantum
* experimental
*/
import experimental.quantum.Language
class WeakRsaAlgorithmNode extends Crypto::KeyOperationAlgorithmNode {
WeakRsaAlgorithmNode() {
this.getAlgorithmType() = Crypto::KeyOpAlg::TAsymmetricCipher(Crypto::KeyOpAlg::RSA()) and
this.getKeySizeFixed() < 2048
}
}
from Crypto::KeyOperationNode op, string message
where
op.getAKnownAlgorithm() instanceof WeakRsaAlgorithmNode and
message = "Weak RSA instance found with key length <2048"
select op, message