Cryptography

Composite Recipes

Recipes that include further recipes, often including the individual recipes below.

• Find hardcoded protocol choice
• Find programmatic edits of Security provider list
• Hardcoded algorithm choice
• Post quantum cryptography

Recipes

• Find SSL configuration
• Find Security.setProperty(..) calls for certain properties
• Find hardcoded PEM certificates
• Find hardcoded PEM private keys
• Find hardcoded algorithms in KeyPairGenerator
• Find hardcoded algorithms in SecretKeySpec
• Find hardcoded cipher suites on SSL sockets
• Find hardcoded numbers passed into RSAKeyGenParameterSpec
• Find hardcoded protocols on SSL socket creation
• Find hardcoded protocols on SSL sockets
• Find insecure Security.setProperty calls
• Find where SSLContext is set as system default
• Hardcoded algorithm specific parameters
• Hardcoded ciphersuite choice