Skip to content

Commit 71eae39

Browse files
committed
Adding missing block modes.
1 parent c98e6d7 commit 71eae39

File tree

1 file changed

+6
-0
lines changed
  • shared/cryptography/codeql/cryptography

1 file changed

+6
-0
lines changed

shared/cryptography/codeql/cryptography/Model.qll

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -761,12 +761,14 @@ module CryptographyBase<LocationSig Location, InputSig<Location> Input> {
761761
newtype TBlockCipherModeOperationType =
762762
ECB() or // Not secure, widely used
763763
CBC() or // Vulnerable to padding oracle attacks
764+
CFB() or
764765
GCM() or // Widely used AEAD mode (TLS 1.3, SSH, IPsec)
765766
CTR() or // Fast stream-like encryption (SSH, disk encryption)
766767
XTS() or // Standard for full-disk encryption (BitLocker, LUKS, FileVault)
767768
CCM() or // Used in lightweight cryptography (IoT, WPA2)
768769
SIV() or // Misuse-resistant encryption, used in secure storage
769770
OCB() or // Efficient AEAD mode
771+
OFB() or
770772
OtherMode()
771773

772774
class ModeOfOperationAlgorithmNode extends AlgorithmNode, TModeOfOperationAlgorithm {
@@ -807,6 +809,10 @@ module CryptographyBase<LocationSig Location, InputSig<Location> Input> {
807809
or
808810
type instanceof OCB and name = "OCB"
809811
or
812+
type instanceof CFB and name = "CFB"
813+
or
814+
type instanceof OFB and name = "OFB"
815+
or
810816
type instanceof OtherMode and name = this.getRawAlgorithmName()
811817
}
812818

0 commit comments

Comments
 (0)