Skip to content

Commit

Permalink
Drop SHA3-224
Browse files Browse the repository at this point in the history
Drop the 224bits variant as it looks like SHA3-224 may be deprecated soon based on NIST's most recent draft revision of Transitioning the Use of Cryptographic Algorithms and Key Lengths
  • Loading branch information
aibaars authored Nov 25, 2024
1 parent c6eaed3 commit 5eb91fd
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion java/ql/lib/semmle/code/java/security/Encryption.qll
Original file line number Diff line number Diff line change
Expand Up @@ -250,7 +250,7 @@ string getASecureAlgorithmName() {
result =
[
"RSA", "SHA-?256", "SHA-?512", "CCM", "GCM", "AES(?![^a-zA-Z](ECB|CBC/PKCS[57]Padding))",
"Blowfish", "ECIES", "SHA3-(224|256|384|512)"
"Blowfish", "ECIES", "SHA3-(256|384|512)"
]
}

Expand Down

0 comments on commit 5eb91fd

Please sign in to comment.