File tree Expand file tree Collapse file tree 2 files changed +3
-3
lines changed
experimental/Security/CWE/CWE-326
semmle/code/java/security Expand file tree Collapse file tree 2 files changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -25,12 +25,12 @@ public void CryptoMethod() {
2525 keyPairGen4 .initialize (2048 );
2626
2727 KeyPairGenerator keyPairGen5 = KeyPairGenerator .getInstance ("EC" );
28- // BAD: Key size is less than 224
28+ // BAD: Key size is less than 256
2929 ECGenParameterSpec ecSpec1 = new ECGenParameterSpec ("secp112r1" );
3030 keyPairGen5 .initialize (ecSpec1 );
3131
3232 KeyPairGenerator keyPairGen6 = KeyPairGenerator .getInstance ("EC" );
33- // GOOD: Key size is no less than 224
33+ // GOOD: Key size is no less than 256
3434 ECGenParameterSpec ecSpec2 = new ECGenParameterSpec ("secp256r1" );
3535 keyPairGen6 .initialize (ecSpec2 );
3636 }
Original file line number Diff line number Diff line change @@ -315,7 +315,7 @@ class JavaSecuritySignature extends JavaSecurityAlgoSpec {
315315 override Expr getAlgoSpec ( ) { result = this .( ConstructorCall ) .getArgument ( 0 ) }
316316}
317317
318- /** Method call to the Java class `java.security.KeyPairGenerator`. */
318+ /** A method call to the Java class `java.security.KeyPairGenerator`. */
319319class JavaSecurityKeyPairGenerator extends JavaxCryptoAlgoSpec {
320320 JavaSecurityKeyPairGenerator ( ) {
321321 exists ( Method m | m .getAReference ( ) = this |
You can’t perform that action at this time.
0 commit comments