add argon2 variants to known KDF names

Lordfirespeed · Lordfirespeed · commit 12a161405f87 · 2026-01-28T14:14:23.000Z
diff --git a/python/ql/lib/experimental/cryptography/CryptoAlgorithmNames.qll b/python/ql/lib/experimental/cryptography/CryptoAlgorithmNames.qll
@@ -104,9 +104,9 @@ predicate isSymmetricEncryptionAlgorithm(string name) {
 predicate isKeyDerivationAlgorithm(string name) {
   name =
     [
-      "ARGON2", "CONCATKDF", "CONCATKDFHASH", "CONCATKDFHMAC", "KBKDFCMAC", "BCRYPT", "HKDF",
-      "HKDFEXPAND", "KBKDF", "KBKDFHMAC", "PBKDF1", "PBKDF2", "PBKDF2HMAC", "PKCS5", "SCRYPT",
-      "X963KDF", "EVPKDF"
+      "ARGON2", "ARGON2D", "ARGON2I", "ARGON2ID", "CONCATKDF", "CONCATKDFHASH", "CONCATKDFHMAC",
+      "KBKDFCMAC", "BCRYPT", "HKDF", "HKDFEXPAND", "KBKDF", "KBKDFHMAC", "PBKDF1", "PBKDF2",
+      "PBKDF2HMAC", "PKCS5", "SCRYPT", "X963KDF", "EVPKDF"
     ]
 }
 

Original file line number	Diff line number	Diff line change
`@@ -104,9 +104,9 @@ predicate isSymmetricEncryptionAlgorithm(string name) {`
`104`	`104`	`predicate isKeyDerivationAlgorithm(string name) {`
`105`	`105`	`name =`
`106`	`106`	`[`
`107`		`- "ARGON2", "CONCATKDF", "CONCATKDFHASH", "CONCATKDFHMAC", "KBKDFCMAC", "BCRYPT", "HKDF",`
`108`		`- "HKDFEXPAND", "KBKDF", "KBKDFHMAC", "PBKDF1", "PBKDF2", "PBKDF2HMAC", "PKCS5", "SCRYPT",`
`109`		`- "X963KDF", "EVPKDF"`
	`107`	`+ "ARGON2", "ARGON2D", "ARGON2I", "ARGON2ID", "CONCATKDF", "CONCATKDFHASH", "CONCATKDFHMAC",`
	`108`	`+ "KBKDFCMAC", "BCRYPT", "HKDF", "HKDFEXPAND", "KBKDF", "KBKDFHMAC", "PBKDF1", "PBKDF2",`
	`109`	`+ "PBKDF2HMAC", "PKCS5", "SCRYPT", "X963KDF", "EVPKDF"`
`110`	`110`	`]`
`111`	`111`	`}`
`112`	`112`