REDMOND\brodes
|
540daa6df2
|
Crypto: weak symmetric cipher tests.
|
2025-10-17 13:40:15 -04:00 |
|
REDMOND\brodes
|
b06e05362b
|
Crypto: altering all query IDs in examples to have "examples" in the ID, to make clear the query is not intended for production.
|
2025-10-17 13:39:50 -04:00 |
|
REDMOND\brodes
|
1b205d8673
|
Removing WeakRSA, this is redundant with weak asymmetric key size.
|
2025-10-17 13:39:05 -04:00 |
|
REDMOND\brodes
|
b4ecb91c83
|
Crypto: Add missing cipher algorithms to JCA. Update node tests to account for missing cipher algorithms.
|
2025-10-17 13:38:47 -04:00 |
|
REDMOND\brodes
|
f480d90a68
|
Crypto: Add missing block mode JCA Models, add block mode unit tests
|
2025-10-17 13:13:14 -04:00 |
|
REDMOND\brodes
|
e12734162f
|
Crypto: WeakKDFKeySize tests.
|
2025-10-17 12:32:24 -04:00 |
|
REDMOND\brodes
|
628bab92fc
|
Crypto: Modify BadMacOrderMacOnEncryptPlaintext to be a path query that traces through any intermediate encrypt or mac to the final encrypt or mac.
|
2025-10-17 12:06:34 -04:00 |
|
REDMOND\brodes
|
ff7840dc9f
|
Crypto: removing precision tags on experimental queries.
|
2025-10-17 10:52:32 -04:00 |
|
REDMOND\brodes
|
ef6f0222f2
|
Crypto: Addressing FPs in BadMacOrderMacOnEncryptPlaintext
|
2025-10-16 16:11:42 -04:00 |
|
REDMOND\brodes
|
5923e5cbb0
|
Crypto: Bad expected files in last push.
|
2025-10-16 15:45:27 -04:00 |
|
REDMOND\brodes
|
700f34e53a
|
Crypto: Bad Mac use tests, and fix for BadMacOrderMacOnEncryptPlaintext (barriers were blocking flow through an encrypt to a subsequent mac on the same plaintext)
|
2025-10-16 15:44:57 -04:00 |
|
REDMOND\brodes
|
b9b0037e07
|
Crypto: Comment todo for observed missing modeled case. Tests for weak and unknown KDF iteration count.
|
2025-10-16 14:07:45 -04:00 |
|
REDMOND\brodes
|
3f36b09b3c
|
Crypto: Rename tests for weak asymmetric key gen size.
|
2025-10-16 11:18:36 -04:00 |
|
REDMOND\brodes
|
a64a24d25d
|
Crypto: Comment in Language.qll
|
2025-10-16 11:03:49 -04:00 |
|
REDMOND\brodes
|
79ccef3a58
|
Crypto: Initial sketch for unknown hash, the model needs to recognize unknowns but where the algorithm category (e.g., hashing) is known.
|
2025-10-16 11:03:16 -04:00 |
|
REDMOND\brodes
|
d2598d4f5d
|
Crypto: Updating weak hash tests
|
2025-10-16 10:56:08 -04:00 |
|
REDMOND\brodes
|
4860034d41
|
Crypto: Weak Hash test cases update and expected file.
|
2025-10-16 10:40:53 -04:00 |
|
REDMOND\brodes
|
25599e9b4b
|
crypto: Update JCA model macs to take into consideration update calls (use prior pattern for signatures). Misc. bug fixes.
|
2025-10-15 16:25:36 -04:00 |
|
REDMOND\brodes
|
15e266db94
|
Crypto: Tweaks to bad crypto ordering queries.
|
2025-10-15 14:20:40 -04:00 |
|
REDMOND\brodes
|
9a6aac1300
|
Crypto: To get unreferenced parameters as general sources for Java, I've included the caveat that if a function is called, all the calls appear to be in test files.
|
2025-10-15 14:20:16 -04:00 |
|
REDMOND\brodes
|
c6174fbb93
|
Crypto: remove precision tag
|
2025-10-15 14:10:16 -04:00 |
|
REDMOND\brodes
|
c7be23e1fe
|
Crypto: Remove all precision tags from all experimental queries. Precision is largely in flux while the models are being developed.
|
2025-10-15 09:22:04 -04:00 |
|
REDMOND\brodes
|
bf9a249624
|
Crypto: Experimental queries for mac ordering
|
2025-10-15 08:06:50 -04:00 |
|
REDMOND\brodes
|
ee08385e31
|
Crytpo: Update JCA keyagreement to type conversion, XDH is a type of ECDH.
|
2025-10-15 08:06:19 -04:00 |
|
REDMOND\brodes
|
55bbcee301
|
Crypto: Make WeakAsymmetricKeyGenSize a path problem.
|
2025-10-13 17:04:29 -04:00 |
|
REDMOND\brodes
|
7e8acd76c3
|
Crypto: Update WeakAsymmetricKeyGenSize to a path problem.
|
2025-10-13 15:48:32 -04:00 |
|
REDMOND\brodes
|
8b5a42328e
|
Crypto: Convert ReusedNonce.ql into a path problem.
|
2025-10-13 15:34:41 -04:00 |
|
REDMOND\brodes
|
7847e92670
|
Crypto: Update KDF iteration and count to be path problems
|
2025-10-13 15:30:53 -04:00 |
|
REDMOND\brodes
|
76128ed8dc
|
Crypto: Update InsecureIVorNonce to be a path problem.
|
2025-10-13 15:29:57 -04:00 |
|
REDMOND\brodes
|
bd068c2a69
|
Crypto: Updating expected file for weak asymmetric key gen size.
|
2025-10-13 12:08:07 -04:00 |
|
REDMOND\brodes
|
4b241d7065
|
Crypto: adding initial weak hash query overhaul and tests, but no expected file yet.
|
2025-10-13 12:04:51 -04:00 |
|
REDMOND\brodes
|
08abdb8c85
|
Crypto: Adding a "javaConstant" concept to handle config files.
|
2025-10-13 12:03:41 -04:00 |
|
REDMOND\brodes
|
e76ced1513
|
Crypto: Updating weak asymmetric key gen to include key exchange.
|
2025-10-10 15:32:39 -04:00 |
|
REDMOND\brodes
|
d68f3cff8b
|
Crypto: InsecureIVorNonceSource now ignored null to avoid being too noisy.
|
2025-10-10 14:51:16 -04:00 |
|
REDMOND\brodes
|
36673659ad
|
Crypto: Weak asymmetric key gen size fixes and test.
|
2025-10-10 14:49:35 -04:00 |
|
REDMOND\brodes
|
758759a304
|
Crypto: Reused nonce query updates and test updates to address false positives.
|
2025-10-10 12:25:31 -04:00 |
|
REDMOND\brodes
|
fba80870a6
|
Crypto: Example query reorg - moving queries of this PR into 'examples' subdirectories.
|
2025-10-09 09:03:00 -04:00 |
|
REDMOND\brodes
|
deb43735be
|
Crypto: Minor fixes to WeakSymmetricCipher, change to a singular name for consistency.
|
2025-10-09 08:39:39 -04:00 |
|
REDMOND\brodes
|
3dedda4233
|
Merge branch 'santander-java-crypto-check' of https://github.com/bdrodes/codeql into santander-java-crypto-check
|
2025-10-09 08:18:04 -04:00 |
|
REDMOND\brodes
|
c6cc4fff51
|
Crypto: Minor fixes to WeakBlockModes, WeakHash to consider SHA3 ok, Added unknown hash.
|
2025-10-09 08:16:28 -04:00 |
|
Nicolas Will
|
fdba3acc4b
|
Crypto: Fix QL-for-QL alert and auto-format
|
2025-10-09 13:59:51 +02:00 |
|
REDMOND\brodes
|
f524de4afc
|
Crypto: Updating insecure iv/nonce to consider if an operation is known for it, and if so do not alert on non-secure random if it is tied to decryption
|
2025-10-08 16:27:18 -04:00 |
|
REDMOND\brodes
|
7a57496c54
|
Crypto: Missing test update.
|
2025-10-08 14:16:47 -04:00 |
|
REDMOND\brodes
|
11e81395b5
|
Crypto: Updated default flows to use taint tracking (this is needed to fix false positives in the unknown IV/Nonce query). Add the unknown IV/Nonce query and associated test cases. Fix unknown IV/Nonce query to focus on cases where the oepration isn't known or the operation subtype is not encrypt or wrap.
|
2025-10-08 14:14:17 -04:00 |
|
REDMOND\brodes
|
75b5a9fda8
|
Crypto: Update general regression test results to account for removal of JCA random source.
|
2025-10-08 12:55:11 -04:00 |
|
REDMOND\brodes
|
8e10e1937d
|
Crypto: Adding query for unknown IV initialization.
|
2025-10-08 12:49:54 -04:00 |
|
REDMOND\brodes
|
83ff70bcd8
|
Crypto: Adding tests for insecure iv or nonce. Updating generic literal sources to include array literals.
|
2025-10-08 12:47:58 -04:00 |
|
REDMOND\brodes
|
bd34b6ce02
|
Crypto: Removing JCA model of random, need to reassess this as this impacts the insecure IV/Nonce query. Updated name of the Insecure nonce query to be InsecureIVorNonce
|
2025-10-08 11:41:21 -04:00 |
|
REDMOND\brodes
|
143be8cc35
|
Crypto: Remove redundant queries.
|
2025-10-08 10:26:05 -04:00 |
|
REDMOND\brodes
|
1b1b333e8b
|
Crypto: Modify suggested queries per misc. side conversations on standards. Remove redundant query. Fix QL-for-QL issues.
|
2025-10-08 10:21:06 -04:00 |
|