CodeQL library for Java/Kotlin
codeql/java-all 0.9.2-dev (changelog, source)
Search

Module MaybeBrokenCryptoAlgorithmQuery

Provides classes and a taint-tracking configuration to reason about the use of potentially insecure cryptographic algorithms.

Import path

import semmle.code.java.security.MaybeBrokenCryptoAlgorithmQuery

Imports

java

Provides all default Java QL imports.

Classes

InsecureAlgoLiteral

A string literal that may refer to an insecure cryptographic algorithm.

InsecureAlgoProperty

A property access that may refer to an insecure cryptographic algorithm.

InsecureAlgorithm

A reference to an insecure cryptographic algorithm.

Modules

InsecureCryptoConfig

A taint-tracking configuration to reason about the use of potentially insecure cryptographic algorithms.

Aliases

InsecureCryptoFlow

Taint-tracking flow for use of potentially insecure cryptographic algorithms.