You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
|[Invalid key size](./cpp/src/docs/crypto/InvalidKeySize.md"correctness, crypto")|Tests if keys passed to EncryptInit_ex have the same size as the key size of the cipher used|warning|medium|
35
35
|[Legacy cryptographic algorithm](./cpp/src/docs/crypto/UseOfLegacyAlgorithm.md"correctness, crypto")|Detects potential instantiations of legacy cryptographic algorithms|warning|medium|
36
36
|[Missing engine initialization](./cpp/src/docs/crypto/MissingEngineInit.md"correctness, crypto")|Finds created OpenSSL engines that may not be properly initialized|warning|medium|
37
-
|[Non-cleared bignum detection](./cpp/src/docs/crypto/BignumClearing.md"correctness, crypto")|Determines if random bignums are properly cleared|warning|medium|
38
-
|[RAND_bytes and BN_rand error handling](./cpp/src/docs/crypto/ErrorHandling.md"correctness, crypto")|Checks if care is being taken to perform proper error handling|warning|high|
39
-
|[Random buffer too small](./cpp/src/docs/crypto/RandomBufferTooSmall.md"crypto, security")|Finds buffer overflows in calls to `RAND_bytes`|warning|high|
37
+
|[Missing zeroization of random BIGNUMs](./cpp/src/docs/crypto/MissingZeroization.md"correctness, crypto")|Determines if random bignums are properly zeroized|warning|medium|
38
+
|[Proper error handling](./cpp/src/docs/crypto/ErrorHandling.md"correctness, crypto")|Checks if returned error codes are properly checked|warning|high|
39
+
|[Random buffer too small](./cpp/src/docs/crypto/RandomBufferTooSmall.md"crypto, security")|Finds buffer overflows in calls to CSPRNGs|warning|high|
40
40
|[Static key flow](./cpp/src/docs/crypto/StaticKeyFlow.md"crypto, security")|Finds crypto variables initialized using static keys|error|high|
41
41
|[Static password flow](./cpp/src/docs/crypto/StaticPasswordFlow.md"crypto, security")|Finds crypto variables initialized using static passwords|error|high|
42
42
|[Weak randomness taint](./cpp/src/docs/crypto/WeakRandomnessTaint.md"crypto, security")|Finds crypto variables initialized using weak randomness|error|high|
0 commit comments