Drop SHA3-224

aibaars · web-flow · commit 5eb91fd5168a · 2024-11-25T11:25:45.000+01:00
Drop the 224bits variant as it looks like SHA3-224 may be deprecated soon based on NIST's most recent draft revision of Transitioning the Use of Cryptographic Algorithms and Key Lengths
diff --git a/java/ql/lib/semmle/code/java/security/Encryption.qll b/java/ql/lib/semmle/code/java/security/Encryption.qll
@@ -250,7 +250,7 @@ string getASecureAlgorithmName() {
   result =
     [
       "RSA", "SHA-?256", "SHA-?512", "CCM", "GCM", "AES(?![^a-zA-Z](ECB|CBC/PKCS[57]Padding))",
-      "Blowfish", "ECIES", "SHA3-(224|256|384|512)"
+      "Blowfish", "ECIES", "SHA3-(256|384|512)"
     ]
 }
 

Original file line number	Diff line number	Diff line change
`@@ -250,7 +250,7 @@ string getASecureAlgorithmName() {`
`250`	`250`	`result =`
`251`	`251`	`[`
`252`	`252`	`"RSA", "SHA-?256", "SHA-?512", "CCM", "GCM", "AES(?![^a-zA-Z](ECB\|CBC/PKCS[57]Padding))",`
`253`		`- "Blowfish", "ECIES", "SHA3-(224\|256\|384\|512)"`
	`253`	`+ "Blowfish", "ECIES", "SHA3-(256\|384\|512)"`
`254`	`254`	`]`
`255`	`255`	`}`
`256`	`256`