codeql/java/ql/lib/semmle/code/java/security/RsaWithoutOaepQuery.qll

/** Definitions for the RSA without OAEP query */

import java
import Encryption
import semmle.code.java.dataflow.DataFlow

/**
 * A configuration for finding RSA ciphers initialized without using OAEP padding.
 */
module RsaWithoutOaepConfig implements DataFlow::ConfigSig {
  predicate isSource(DataFlow::Node src) {
    exists(CompileTimeConstantExpr specExpr, string spec |
      specExpr.getStringValue() = spec and
      specExpr = src.asExpr() and
      spec.matches("RSA/%") and
      not spec.matches("%OAEP%")
    )
  }

  predicate isSink(DataFlow::Node sink) {
    exists(CryptoAlgoSpec cr | sink.asExpr() = cr.getAlgoSpec())
  }

  predicate observeDiffInformedIncrementalMode() { any() }
}

/** Flow for finding RSA ciphers initialized without using OAEP padding. */
module RsaWithoutOaepFlow = DataFlow::Global<RsaWithoutOaepConfig>;