16 Commits

Author	SHA1	Message	Date
Anders Schack-Mulligen	f6541811d2	Dataflow: Update more tests.	2021-09-07 13:02:20 +02:00
Chris Smowton	171dc26531	Fix test reference and expectations	2021-08-09 13:56:55 +01:00
Fosstars	44e52517ad	Removed unsafeMacCheckWithArraysDeepEquals() test	2021-08-01 10:12:38 +02:00
Fosstars	ad54c9d937	Two queries for timing attacks	2021-08-01 09:47:07 +02:00
Artem Smotrakov	e3b6ceade5	Renamed NonConstantTimeCryptoComparison.ql to NonConstantTimeCheckOnSignature.ql	2021-08-01 09:47:06 +02:00
Artem Smotrakov	8b557765b3	Narrow NonConstantTimeCryptoComparison.ql to timing attack on signatures and MACs only	2021-08-01 09:47:06 +02:00
Artem Smotrakov	1f2a9cdda7	Added taint propagation steps for hashes in NonConstantTimeCryptoComparison.ql	2021-08-01 09:47:06 +02:00
Artem Smotrakov	c96d939cf5	Covered custom fast-fail checks in NonConstantTimeCryptoComparison.ql ... Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com>	2021-08-01 09:47:06 +02:00
Artem Smotrakov	8c4da16459	More test cases for java/non-constant-time-crypto-comparison	2021-08-01 09:47:04 +02:00
Artem Smotrakov	a4f3a5a88e	Take into account remote user input in java/non-constant-time-crypto-comparison	2021-08-01 09:47:03 +02:00
Artem Smotrakov	8e6d227dc0	More sinks for java/ql/src/experimental/Security/CWE/CWE-208/NonConstantTimeCryptoComparison.ql	2021-08-01 09:47:03 +02:00
Artem Smotrakov	dfa3b523d0	Renamed files	2021-08-01 09:47:03 +02:00
Artem Smotrakov	75f67959f3	Covered Arrays.deepEquals() in NonConstantTimeCryptoComparison.ql	2021-08-01 09:47:02 +02:00
Artem Smotrakov	5dbcf1d611	Covered Object.deepEquals() in NotConstantTimeCryptoComparison.ql	2021-08-01 09:47:02 +02:00
Artem Smotrakov	f245dc3ac8	Removed hashes from NotConstantTimeCryptoComparison.ql	2021-08-01 09:47:02 +02:00
Artem Smotrakov	67579dd1d8	Added tests for NotConstantTimeCryptoComparison.ql	2021-08-01 09:47:01 +02:00