Merge pull request #18084 from github/aibaars/java-sha3

Java: add SHA3 family to list of secure crypto algorithms
2026-04-17 21:14:02 +02:00 · 2024-11-25 15:07:43 +01:00
parent d5c8dfd88c 5eb91fd516
commit c2b342f1a0
3 changed files with 9 additions and 2 deletions
--- a/java/ql/lib/semmle/code/java/security/Encryption.qll
+++ b/java/ql/lib/semmle/code/java/security/Encryption.qll
@@ -247,7 +247,7 @@ string getASecureAlgorithmName() {
  result =
    [
      "RSA", "SHA-?256", "SHA-?512", "CCM", "GCM", "AES(?![^a-zA-Z](ECB|CBC/PKCS[57]Padding))",
-      "Blowfish", "ECIES"
+      "Blowfish", "ECIES", "SHA3-(256|384|512)"
    ]
 }