Skip to content

Commit 95de2dc

Browse files
authored
Merge pull request #24 from trailofbits/fix/legacy-crypto
Removed DES and Cast to reduce false positives
2 parents d994c7c + dd915b7 commit 95de2dc

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

cpp/src/crypto/UseOfLegacyAlgorithm.ql

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
/**
22
* @name Use of legacy cryptographic algorithm
33
* @id tob/cpp/use-of-legacy-algorithm
4-
* @description Detects potential instantiations of legacy cryptographic algorithms
4+
* @description Detects potential calls to legacy cryptographic algorithms
55
* @kind problem
66
* @tags correctness crypto
77
* @problem.severity warning
@@ -22,8 +22,7 @@ where
2222
// KDFs
2323
"%pbkdf1%",
2424
// Symmetric ciphers
25-
"%arcfour%", "%blowfish%", "%cast%", "%des%", "%idea%", "%kasumi%",
26-
"%magma%", "%rc2%", "%rc4%", "%tdea%"
25+
"%arcfour%", "%blowfish%", "%kasumi%", "%magma%", "%rc2%", "%rc4%", "%tdea%"
2726
])
2827
select call.getLocation(),
2928
"Potential use of legacy cryptographic algorithm " + call.getTarget().getQualifiedName() +

0 commit comments

Comments
 (0)