13844 Commits

Author	SHA1	Message	Date
REDMOND\brodes	b9b0037e07	Crypto: Comment todo for observed missing modeled case. Tests for weak and unknown KDF iteration count.	2025-10-16 14:07:45 -04:00
REDMOND\brodes	3f36b09b3c	Crypto: Rename tests for weak asymmetric key gen size.	2025-10-16 11:18:36 -04:00
REDMOND\brodes	a64a24d25d	Crypto: Comment in Language.qll	2025-10-16 11:03:49 -04:00
REDMOND\brodes	79ccef3a58	Crypto: Initial sketch for unknown hash, the model needs to recognize unknowns but where the algorithm category (e.g., hashing) is known.	2025-10-16 11:03:16 -04:00
REDMOND\brodes	d2598d4f5d	Crypto: Updating weak hash tests	2025-10-16 10:56:08 -04:00
REDMOND\brodes	4860034d41	Crypto: Weak Hash test cases update and expected file.	2025-10-16 10:40:53 -04:00
REDMOND\brodes	25599e9b4b	crypto: Update JCA model macs to take into consideration update calls (use prior pattern for signatures). Misc. bug fixes.	2025-10-15 16:25:36 -04:00
REDMOND\brodes	15e266db94	Crypto: Tweaks to bad crypto ordering queries.	2025-10-15 14:20:40 -04:00
REDMOND\brodes	9a6aac1300	Crypto: To get unreferenced parameters as general sources for Java, I've included the caveat that if a function is called, all the calls appear to be in test files.	2025-10-15 14:20:16 -04:00
REDMOND\brodes	c6174fbb93	Crypto: remove precision tag	2025-10-15 14:10:16 -04:00
REDMOND\brodes	c7be23e1fe	Crypto: Remove all precision tags from all experimental queries. Precision is largely in flux while the models are being developed.	2025-10-15 09:22:04 -04:00
REDMOND\brodes	bf9a249624	Crypto: Experimental queries for mac ordering	2025-10-15 08:06:50 -04:00
REDMOND\brodes	ee08385e31	Crytpo: Update JCA keyagreement to type conversion, XDH is a type of ECDH.	2025-10-15 08:06:19 -04:00
REDMOND\brodes	55bbcee301	Crypto: Make WeakAsymmetricKeyGenSize a path problem.	2025-10-13 17:04:29 -04:00
REDMOND\brodes	7e8acd76c3	Crypto: Update WeakAsymmetricKeyGenSize to a path problem.	2025-10-13 15:48:32 -04:00
REDMOND\brodes	8b5a42328e	Crypto: Convert ReusedNonce.ql into a path problem.	2025-10-13 15:34:41 -04:00
REDMOND\brodes	7847e92670	Crypto: Update KDF iteration and count to be path problems	2025-10-13 15:30:53 -04:00
REDMOND\brodes	76128ed8dc	Crypto: Update InsecureIVorNonce to be a path problem.	2025-10-13 15:29:57 -04:00
REDMOND\brodes	bd068c2a69	Crypto: Updating expected file for weak asymmetric key gen size.	2025-10-13 12:08:07 -04:00
REDMOND\brodes	4b241d7065	Crypto: adding initial weak hash query overhaul and tests, but no expected file yet.	2025-10-13 12:04:51 -04:00
REDMOND\brodes	08abdb8c85	Crypto: Adding a "javaConstant" concept to handle config files.	2025-10-13 12:03:41 -04:00
REDMOND\brodes	e76ced1513	Crypto: Updating weak asymmetric key gen to include key exchange.	2025-10-10 15:32:39 -04:00
REDMOND\brodes	d68f3cff8b	Crypto: InsecureIVorNonceSource now ignored null to avoid being too noisy.	2025-10-10 14:51:16 -04:00
REDMOND\brodes	36673659ad	Crypto: Weak asymmetric key gen size fixes and test.	2025-10-10 14:49:35 -04:00
REDMOND\brodes	758759a304	Crypto: Reused nonce query updates and test updates to address false positives.	2025-10-10 12:25:31 -04:00
REDMOND\brodes	fba80870a6	Crypto: Example query reorg - moving queries of this PR into 'examples' subdirectories.	2025-10-09 09:03:00 -04:00
REDMOND\brodes	deb43735be	Crypto: Minor fixes to WeakSymmetricCipher, change to a singular name for consistency.	2025-10-09 08:39:39 -04:00
REDMOND\brodes	3dedda4233	Merge branch 'santander-java-crypto-check' of https://github.com/bdrodes/codeql into santander-java-crypto-check	2025-10-09 08:18:04 -04:00
REDMOND\brodes	c6cc4fff51	Crypto: Minor fixes to WeakBlockModes, WeakHash to consider SHA3 ok, Added unknown hash.	2025-10-09 08:16:28 -04:00
Nicolas Will	fdba3acc4b	Crypto: Fix QL-for-QL alert and auto-format	2025-10-09 13:59:51 +02:00
REDMOND\brodes	f524de4afc	Crypto: Updating insecure iv/nonce to consider if an operation is known for it, and if so do not alert on non-secure random if it is tied to decryption	2025-10-08 16:27:18 -04:00
REDMOND\brodes	7a57496c54	Crypto: Missing test update.	2025-10-08 14:16:47 -04:00
REDMOND\brodes	11e81395b5	Crypto: Updated default flows to use taint tracking (this is needed to fix false positives in the unknown IV/Nonce query). Add the unknown IV/Nonce query and associated test cases. Fix unknown IV/Nonce query to focus on cases where the oepration isn't known or the operation subtype is not encrypt or wrap.	2025-10-08 14:14:17 -04:00
REDMOND\brodes	75b5a9fda8	Crypto: Update general regression test results to account for removal of JCA random source.	2025-10-08 12:55:11 -04:00
REDMOND\brodes	8e10e1937d	Crypto: Adding query for unknown IV initialization.	2025-10-08 12:49:54 -04:00
REDMOND\brodes	83ff70bcd8	Crypto: Adding tests for insecure iv or nonce. Updating generic literal sources to include array literals.	2025-10-08 12:47:58 -04:00
REDMOND\brodes	bd34b6ce02	Crypto: Removing JCA model of random, need to reassess this as this impacts the insecure IV/Nonce query. Updated name of the Insecure nonce query to be InsecureIVorNonce	2025-10-08 11:41:21 -04:00
REDMOND\brodes	143be8cc35	Crypto: Remove redundant queries.	2025-10-08 10:26:05 -04:00
REDMOND\brodes	1b1b333e8b	Crypto: Modify suggested queries per misc. side conversations on standards. Remove redundant query. Fix QL-for-QL issues.	2025-10-08 10:21:06 -04:00
REDMOND\brodes	cf88e3f52d	Crypto: Standardize naming where use of "family" and "type" have been used. Prefer 'type'.	2025-10-08 09:54:53 -04:00
REDMOND\brodes	bba541c016	Merge remote-tracking branch 'upstream/java-crypto-check' into santander-java-crypto-check	2025-10-08 09:30:26 -04:00
Anders Schack-Mulligen	99f5dcaaa4	Java: Fix bug in ConstantExpAppearsNonConstant.	2025-10-08 10:32:51 +02:00
Idriss Riouak	28fe20e3e4	Merge pull request #20595 from github/idrissrio/java-lambda ... Java: Add integration test for buildless lambda recovery	2025-10-08 09:53:29 +02:00
Alex Eyers-Taylor	542bdf0792	Java: Use Overlay dataflow in java.	2025-10-07 17:52:12 +01:00
Alex Eyers-Taylor	c49e2ab2da	DataFlow: Add code to do overlay informed dataflow.	2025-10-07 17:52:12 +01:00
idrissrio	f69e5f5ffc	Java: Accept new test results after extractor changes	2025-10-07 16:55:53 +02:00
idrissrio	55b15a261a	Java: Add integration test for buildless lambda recovery	2025-10-07 16:55:52 +02:00
Anders Schack-Mulligen	18e33b193e	Merge pull request #20589 from aschackmull/java/array-entrypoint-read-taint ... Java: Allow taint-read-steps for array sources.	2025-10-07 15:04:03 +02:00
Anders Schack-Mulligen	7dadbc43fb	Java: Add change note.	2025-10-07 13:51:49 +02:00
Anders Schack-Mulligen	f0bfd7053e	Java: Add test case.	2025-10-07 13:40:44 +02:00