@@ -15,7 +15,6 @@ abstract class InsufficientKeySizeSink extends DataFlow::Node {
1515 predicate hasState ( DataFlow:: FlowState state ) { state instanceof DataFlow:: FlowStateEmpty }
1616}
1717
18- // *********************************** SOURCES ***********************************
1918/** A source for an insufficient key size used in RSA, DSA, and DH algorithms. */
2019private class AsymmetricNonEcSource extends InsufficientKeySizeSource {
2120 AsymmetricNonEcSource ( ) { getNodeIntValue ( this ) < getMinAsymNonEcKeySize ( ) }
@@ -46,7 +45,6 @@ private class SymmetricSource extends InsufficientKeySizeSource {
4645 override predicate hasState ( DataFlow:: FlowState state ) { state = getMinSymKeySize ( ) .toString ( ) }
4746}
4847
49- // ************************** SOURCES HELPER PREDICATES **************************
5048/** Returns the minimum recommended key size for RSA, DSA, and DH algorithms. */
5149private int getMinAsymNonEcKeySize ( ) { result = 2048 }
5250
@@ -74,7 +72,6 @@ private int getEcKeySize(string algorithm) {
7472 result = algorithm .regexpCapture ( ".*[a-zA-Z](\\d+)[a-zA-Z].*" , 1 ) .toInt ( )
7573}
7674
77- // ************************************ SINKS ************************************
7875/** A sink for an insufficient key size used in RSA, DSA, and DH algorithms. */
7976private class AsymmetricNonEcSink extends InsufficientKeySizeSink {
8077 AsymmetricNonEcSink ( ) {
@@ -122,7 +119,6 @@ private class SymmetricSink extends InsufficientKeySizeSink {
122119 override predicate hasState ( DataFlow:: FlowState state ) { state = getMinSymKeySize ( ) .toString ( ) }
123120}
124121
125- // ********************** SINKS HELPER CLASSES & PREDICATES **********************
126122/** A call to a method that initializes a key generator. */
127123abstract private class KeyGenInitMethodAccess extends MethodAccess {
128124 /** Gets the `keysize` argument of this call. */
0 commit comments