hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 17:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Apply doc suggestions

Browse Source
This commit is contained in:
Joe Farebrother
2022-08-16 11:26:18 +01:00
parent 7989ba3391
commit 7c188a6b96
3 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/src/Security/CWE/CWE-1204/StaticInitializationVector.qhelp
View File

@@ -18,7 +18,7 @@ Use a random IV generated by <code>SecureRandom</code>.
<example>
<p>
The following example initializes a cipher with a static IV which is unsafe:
The following example initializes a cipher with a static IV, which is unsafe:
</p>
<sample src="BadStaticInitializationVector.java" />

3
java/ql/src/Security/CWE/CWE-1204/StaticInitializationVector.ql
View File

@@ -1,7 +1,6 @@
/**
* @name Using a static initialization vector for encryption
* @description An initialization vector (IV) used for ciphers of certain modes (such as CBC or GCM) should be unique and unpredicateble.
* Otherwise, if the same IV is used with a the same secret key then the same plaintext results in same ciphertext, which weakens the encryption.
* @description An initialization vector (IV) used for ciphers of certain modes (such as CBC or GCM) should be unique and unpredictable, to maximize encryption and prevent dictionary attacks.
* @kind path-problem
* @problem.severity warning
* @security-severity 7.5

2
java/ql/src/change-notes/2022-07-19-static-initialization-vector.md
View File

@@ -1,4 +1,4 @@
---
category: newQuery
---
* The query "Using a static initialization vector for encryption" (`java/static-initialization-vector`) has been promoted from experimental to the main query pack. This query was originally [submitted as an experimental query by @artem-smotrakov](https://github.com/github/codeql/pull/6357)
* The query "Using a static initialization vector for encryption" (`java/static-initialization-vector`) has been promoted from experimental to the main query pack. This query was originally [submitted as an experimental query by @artem-smotrakov](https://github.com/github/codeql/pull/6357).