fix: remove the pkcs1 scheme

grakshith · grakshith · commit 80bf7cdb5276 · 2024-06-04T11:20:05.000-07:00
diff --git a/java/ql/lib/semmle/code/java/security/Encryption.qll b/java/ql/lib/semmle/code/java/security/Encryption.qll
@@ -250,7 +250,7 @@ string getASecureAlgorithmName() {
   result =
     [
       "RSA", "SHA-?256", "SHA-?512", "CCM", "GCM", "AES(?![^a-zA-Z](ECB|CBC/PKCS[57]Padding))",
-      "Blowfish", "ECIES", "RSA/ECB/OAEPWithSHA-1AndMGF1Padding", "RSA/ECB/PKCS1Padding",
+      "Blowfish", "ECIES", "RSA/ECB/OAEPWithSHA-1AndMGF1Padding",
       "RSA/ECB/OAEPWithSHA-256AndMGF1Padding"
     ]
 }

Original file line number	Diff line number	Diff line change
`@@ -250,7 +250,7 @@ string getASecureAlgorithmName() {`
`250`	`250`	`result =`
`251`	`251`	`[`
`252`	`252`	`"RSA", "SHA-?256", "SHA-?512", "CCM", "GCM", "AES(?![^a-zA-Z](ECB\|CBC/PKCS[57]Padding))",`
`253`		`- "Blowfish", "ECIES", "RSA/ECB/OAEPWithSHA-1AndMGF1Padding", "RSA/ECB/PKCS1Padding",`
	`253`	`+ "Blowfish", "ECIES", "RSA/ECB/OAEPWithSHA-1AndMGF1Padding",`
`254`	`254`	`"RSA/ECB/OAEPWithSHA-256AndMGF1Padding"`
`255`	`255`	`]`
`256`	`256`	`}`