File tree Expand file tree Collapse file tree 4 files changed +26
-9
lines changed
java/ql/src/experimental/quantum/Analysis Expand file tree Collapse file tree 4 files changed +26
-9
lines changed Original file line number Diff line number Diff line change 1
1
/**
2
2
* @name Insecure nonce at a cipher operation
3
- * @id java/insecure-nonce
3
+ * @id java/quantum/insecure-nonce
4
+ * @description A nonce is generated from a source that is not secure. This can lead to
5
+ * vulnerabilities such as replay attacks or key recovery.
4
6
* @kind problem
5
7
* @problem.severity error
6
8
* @precision high
7
- * @description A nonce is generated from a source that is not secure. This can lead to
8
- * vulnerabilities such as replay attacks or key recovery.
9
+ * @tags quantum
10
+ * experimental
9
11
*/
10
12
11
13
import experimental.quantum.Language
Original file line number Diff line number Diff line change 1
1
/**
2
- * @name Detects known weak KDf iteration counts (less than 100k and the count is statically known)
3
- * @id java/crypto_inventory_filters/known_weak_kdf_iteration_count
2
+ * @name Weak known key derivation function iteration count
3
+ * @description Detects key derivation operations with a known weak iteration count.
4
+ * @id java/quantum/weak-kdf-iteration-count
4
5
* @kind problem
6
+ * @precision high
7
+ * @severity problem
8
+ * @tags quantum
9
+ * experimental
5
10
*/
6
11
7
12
import java
Original file line number Diff line number Diff line change 1
1
/**
2
- * @name Detects reuse of the same nonce in multiple operations
3
- * @id java/crypto_inventory_filter/nonce_reuse
2
+ * @name Reuse of cryptographic nonce
3
+ * @description Reuse of nonce in cryptographic operations can lead to vulnerabilities.
4
+ * @id java/quantum/reused-nonce
4
5
* @kind problem
6
+ * @precision medium
7
+ * @severity problem
8
+ * @tags quantum
9
+ * experimental
5
10
*/
6
11
7
12
import java
Original file line number Diff line number Diff line change 1
1
/**
2
- * @name Detects unknown KDf iteration counts
3
- * @id java/crypto_inventory_filters/unknown_kdf_iteration_count
2
+ * @name Unknown key derivation function iteration count
3
+ * @description Detects key derivation operations with an unknown iteration count.
4
+ * @id java/quantum/unknown-kdf-iteration-count
4
5
* @kind problem
6
+ * @precision medium
7
+ * @severity warning
8
+ * @tags quantum
9
+ * experimental
5
10
*/
6
11
7
12
import java
You can’t perform that action at this time.
0 commit comments