Module ComputationallyExpensiveHashFunction

Provides default sources, sinks and sanitizers for detecting “use of a broken or weak cryptographic hashing algorithm on sensitive data” vulnerabilities on sensitive data that DOES require computationally expensive hashing, as well as extension points for adding your own.

Also see the NormalHashFunction module.

Import path

import codeql.rust.security.WeakSensitiveDataHashingExtensions

Classes

Barrier	A barrier for “use of a broken or weak cryptographic hashing algorithm on sensitive data” vulnerabilities that applies to data that does require computationally expensive hashing.
PasswordAsSource	A flow source modeled by the `SensitiveData` library.
Sink	A data flow sink for “use of a broken or weak cryptographic hashing algorithm on sensitive data” vulnerabilities that applies to data that does require computationally expensive hashing. That is, a broken or weak hashing algorithm or one that is not computationally expensive enough for password hashing.
Source	A data flow source for “use of a broken or weak cryptographic hashing algorithm on sensitive data” vulnerabilities that does require computationally expensive hashing. That is, a password.
WeakPasswordHashingOperationInputSink	A flow sink modeled by the `Cryptography` module.