From dd915b725d14a6358346045466284765f4a68556 Mon Sep 17 00:00:00 2001 From: Fredrik Dahlgren Date: Fri, 5 Sep 2025 16:58:10 +0200 Subject: [PATCH] Removed DES and Cast to reduce false positives --- cpp/src/crypto/UseOfLegacyAlgorithm.ql | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/cpp/src/crypto/UseOfLegacyAlgorithm.ql b/cpp/src/crypto/UseOfLegacyAlgorithm.ql index c28220c..8c6e9d0 100644 --- a/cpp/src/crypto/UseOfLegacyAlgorithm.ql +++ b/cpp/src/crypto/UseOfLegacyAlgorithm.ql @@ -1,7 +1,7 @@ /** * @name Use of legacy cryptographic algorithm * @id tob/cpp/use-of-legacy-algorithm - * @description Detects potential instantiations of legacy cryptographic algorithms + * @description Detects potential calls to legacy cryptographic algorithms * @kind problem * @tags correctness crypto * @problem.severity warning @@ -22,8 +22,7 @@ where // KDFs "%pbkdf1%", // Symmetric ciphers - "%arcfour%", "%blowfish%", "%cast%", "%des%", "%idea%", "%kasumi%", - "%magma%", "%rc2%", "%rc4%", "%tdea%" + "%arcfour%", "%blowfish%", "%kasumi%", "%magma%", "%rc2%", "%rc4%", "%tdea%" ]) select call.getLocation(), "Potential use of legacy cryptographic algorithm " + call.getTarget().getQualifiedName() +