You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Some BouncyCastle rules do not capture all available information, in particular static fields defining the parameter sets of certain algorithms. This would for example distinguish the use of kyber512, kyber768 or kyber1024.
Capturing this information is not very difficult but it is a long task given how many classes are used for this in BouncyCastle.
Encapsulated Secrets
Check BcEncapsulatedSecretExtractor and BcEncapsulatedSecretGenerator: for most KEM classes, we only capture them withAnyParameters().
This should be changed to capture the precise content of each constructor.
Most of them have for argument a class of AsymmetricKeyParameter (46 different classes to detect).
These classes do not contain the information directly, instead they usually have a CipherParameters argument. Some of them are already supported, but for these KEM classes, we need support for the classes in the subinterface KEMParameters (9 classes to detect).
Digests
We have a similar scenario with BcDigests, where we could be more precise for some constructor if we add detection rules for additional parameter classes.
For example for Ascon, we should add support for AsconParameters.
The text was updated successfully, but these errors were encountered:
Some BouncyCastle rules do not capture all available information, in particular static fields defining the parameter sets of certain algorithms. This would for example distinguish the use of
kyber512
,kyber768
orkyber1024
.Capturing this information is not very difficult but it is a long task given how many classes are used for this in BouncyCastle.
Encapsulated Secrets
Check
BcEncapsulatedSecretExtractor
andBcEncapsulatedSecretGenerator
: for most KEM classes, we only capture themwithAnyParameters()
.This should be changed to capture the precise content of each constructor.
Most of them have for argument a class of
AsymmetricKeyParameter
(46 different classes to detect).These classes do not contain the information directly, instead they usually have a
CipherParameters
argument. Some of them are already supported, but for these KEM classes, we need support for the classes in the subinterfaceKEMParameters
(9 classes to detect).Digests
We have a similar scenario with
BcDigests
, where we could be more precise for some constructor if we add detection rules for additional parameter classes.For example for Ascon, we should add support for
AsconParameters
.The text was updated successfully, but these errors were encountered: