Crypto: Add Java Cryptographic Analysis Queries - #20605

Merged

nicolaswill merged 71 commits into

github:mainfrom

bdrodes:santander-java-crypto-check

Oct 22, 2025

Commits on Oct 1, 2025

added java cryptographic check queries
unprovable
committed
c5cf0ff
removed all @security.severity ratings to keep the main impartial
unprovable
committed
f38ab45

Commits on Oct 8, 2025

Merge remote-tracking branch 'upstream/java-crypto-check' into santander-java-crypto-check
bdrodes
committed
bba541c
Crypto: Standardize naming where use of "family" and "type" have been used. Prefer 'type'.
bdrodes
committed
cf88e3f
Crypto: Modify suggested queries per misc. side conversations on standards. Remove redundant query. Fix QL-for-QL issues.
bdrodes
committed
1b1b333
Crypto: Remove redundant queries.
bdrodes
committed
143be8c
Crypto: Removing JCA model of random, need to reassess this as this impacts the insecure IV/Nonce query. Updated name of the Insecure nonce query to be InsecureIVorNonce
bdrodes
committed
bd34b6c
Crypto: Adding tests for insecure iv or nonce. Updating generic literal sources to include array literals.
bdrodes
committed
83ff70b
Crypto: Adding query for unknown IV initialization.
bdrodes
committed
8e10e19
Crypto: Update general regression test results to account for removal of JCA random source.
bdrodes
committed
75b5a9f
Crypto: Updated default flows to use taint tracking (this is needed to fix false positives in the unknown IV/Nonce query). Add the unknown IV/Nonce query and associated test cases. Fix unknown IV/N…
bdrodes
committed
11e8139
Crypto: Missing test update.
bdrodes
committed
7a57496
Crypto: Updating insecure iv/nonce to consider if an operation is known for it, and if so do not alert on non-secure random if it is tied to decryption
bdrodes
committed
f524de4

Commits on Oct 9, 2025

Commits on Oct 10, 2025

Commits on Oct 13, 2025

Commits on Oct 15, 2025

Commits on Oct 16, 2025

Commits on Oct 17, 2025

Commits on Oct 18, 2025

Merge branch 'main' into santander-java-crypto-check
bdrodes
authored
2b683c2

Commits on Oct 20, 2025

Commits on Oct 21, 2025

Commits on Oct 22, 2025