Crypto: Updating weak asymmetric key gen to include key exchange.

This commit is contained in:
REDMOND\brodes
2025-10-10 15:32:39 -04:00
parent d68f3cff8b
commit e76ced1513
2 changed files with 3 additions and 1 deletions

View File

@@ -17,6 +17,7 @@ where
key.getCreatingOperation().getAKeySizeSource().asElement().(Literal).getValue().toInt() = keySize and
alg = key.getAKnownAlgorithm() and // NOTE: if algorithm is not known (doesn't bind) we need a separate query
not alg instanceof Crypto::EllipticCurveNode and // Elliptic curve sizes are handled separately and are more tied directly to the algorithm
alg instanceof Crypto::AsymmetricAlgorithmNode and
keySize < 2048
select key, "Use of weak asymmetric key size (" + keySize.toString() + " bits) for algorithm $@",
alg, alg.getAlgorithmName()