Python/JS: Recognize SHA-3 hash functions

Official names are SHA3-224, SHA3-256, SHA3-384, SHA3-512 as per https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf
2026-05-01 19:55:15 +02:00 · 2021-09-27 12:08:40 +02:00
parent 8debae1a3b
commit ded3088529
4 changed files with 30 additions and 2 deletions
--- a/javascript/ql/lib/semmle/javascript/security/CryptoAlgorithms.qll
+++ b/javascript/ql/lib/semmle/javascript/security/CryptoAlgorithms.qll
@@ -28,7 +28,11 @@ private module AlgorithmNames {
    name = "SHA256" or
    name = "SHA384" or
    name = "SHA512" or
-    name = "SHA3"
+    name = "SHA3" or
+    name = "SHA3224" or
+    name = "SHA3256" or
+    name = "SHA3384" or
+    name = "SHA3512"
  }

  predicate isWeakHashingAlgorithm(string name) {