fix: scrypt requires salt

Lordfirespeed · Lordfirespeed · commit 2642af157807 · 2026-01-28T12:43:11.000Z
diff --git a/python/ql/lib/experimental/cryptography/modules/CryptographyModule.qll b/python/ql/lib/experimental/cryptography/modules/CryptographyModule.qll
@@ -111,7 +111,7 @@ module KDF {
     }
 
     override predicate requiresSalt() {
-      this.getAlgorithm().getKDFName() in ["PBKDF2HMAC", "CONCATKDFHMAC", "HKDF"]
+      this.getAlgorithm().getKDFName() in ["PBKDF2HMAC", "CONCATKDFHMAC", "HKDF", "SCRYPT"]
     }
 
     override predicate requiresIteration() { this.getAlgorithm().getKDFName() in ["PBKDF2HMAC"] }

Original file line number	Diff line number	Diff line change
`@@ -111,7 +111,7 @@ module KDF {`
`111`	`111`	`}`
`112`	`112`
`113`	`113`	`override predicate requiresSalt() {`
`114`		`- this.getAlgorithm().getKDFName() in ["PBKDF2HMAC", "CONCATKDFHMAC", "HKDF"]`
	`114`	`+ this.getAlgorithm().getKDFName() in ["PBKDF2HMAC", "CONCATKDFHMAC", "HKDF", "SCRYPT"]`
`115`	`115`	`}`
`116`	`116`
`117`	`117`	`override predicate requiresIteration() { this.getAlgorithm().getKDFName() in ["PBKDF2HMAC"] }`