fix: remove rsa/ecb/* from getASecureAlgorithmName

grakshith · atorralba · grakshith · commit 65af2556edbc · 2024-06-04T11:20:05.000-07:00
Co-authored-by: Tony Torralba &lt;atorralba@users.noreply.github.com&gt;
diff --git a/java/ql/lib/semmle/code/java/security/Encryption.qll b/java/ql/lib/semmle/code/java/security/Encryption.qll
@@ -250,8 +250,7 @@ string getASecureAlgorithmName() {
   result =
     [
       "RSA", "SHA-?256", "SHA-?512", "CCM", "GCM", "AES(?![^a-zA-Z](ECB|CBC/PKCS[57]Padding))",
-      "Blowfish", "ECIES", "RSA/ECB/OAEPWithSHA-1AndMGF1Padding",
-      "RSA/ECB/OAEPWithSHA-256AndMGF1Padding"
+      "Blowfish", "ECIES"
     ]
 }
 

Original file line number	Diff line number	Diff line change
`@@ -250,8 +250,7 @@ string getASecureAlgorithmName() {`
`250`	`250`	`result =`
`251`	`251`	`[`
`252`	`252`	`"RSA", "SHA-?256", "SHA-?512", "CCM", "GCM", "AES(?![^a-zA-Z](ECB\|CBC/PKCS[57]Padding))",`
`253`		`- "Blowfish", "ECIES", "RSA/ECB/OAEPWithSHA-1AndMGF1Padding",`
`254`		`- "RSA/ECB/OAEPWithSHA-256AndMGF1Padding"`
	`253`	`+ "Blowfish", "ECIES"`
`255`	`254`	`]`
`256`	`255`	`}`
`257`	`256`