Merge pull request #6761 from RasmusWL/cryptodome-sha3

Python/JS: Recognize SHA-3 hash functions
2026-04-29 18:55:14 +02:00 · 2021-10-01 13:33:36 +02:00
parent eb26b4a04b ded3088529
commit 1ce9426adf
4 changed files with 30 additions and 2 deletions
--- a/javascript/ql/lib/semmle/javascript/security/CryptoAlgorithms.qll
+++ b/javascript/ql/lib/semmle/javascript/security/CryptoAlgorithms.qll
@@ -28,7 +28,11 @@ private module AlgorithmNames {
    name = "SHA256" or
    name = "SHA384" or
    name = "SHA512" or
-    name = "SHA3"
+    name = "SHA3" or
+    name = "SHA3224" or
+    name = "SHA3256" or
+    name = "SHA3384" or
+    name = "SHA3512"
  }

  predicate isWeakHashingAlgorithm(string name) {