Skip to content

Commit 7c188a6

Browse files
Apply doc suggestions
1 parent 7989ba3 commit 7c188a6

File tree

3 files changed

+3
-4
lines changed

3 files changed

+3
-4
lines changed

java/ql/src/Security/CWE/CWE-1204/StaticInitializationVector.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ Use a random IV generated by <code>SecureRandom</code>.
1818

1919
<example>
2020
<p>
21-
The following example initializes a cipher with a static IV which is unsafe:
21+
The following example initializes a cipher with a static IV, which is unsafe:
2222
</p>
2323
<sample src="BadStaticInitializationVector.java" />
2424

java/ql/src/Security/CWE/CWE-1204/StaticInitializationVector.ql

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,6 @@
11
/**
22
* @name Using a static initialization vector for encryption
3-
* @description An initialization vector (IV) used for ciphers of certain modes (such as CBC or GCM) should be unique and unpredicateble.
4-
* Otherwise, if the same IV is used with a the same secret key then the same plaintext results in same ciphertext, which weakens the encryption.
3+
* @description An initialization vector (IV) used for ciphers of certain modes (such as CBC or GCM) should be unique and unpredictable, to maximize encryption and prevent dictionary attacks.
54
* @kind path-problem
65
* @problem.severity warning
76
* @security-severity 7.5
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
---
22
category: newQuery
33
---
4-
* The query "Using a static initialization vector for encryption" (`java/static-initialization-vector`) has been promoted from experimental to the main query pack. This query was originally [submitted as an experimental query by @artem-smotrakov](https://github.com/github/codeql/pull/6357)
4+
* The query "Using a static initialization vector for encryption" (`java/static-initialization-vector`) has been promoted from experimental to the main query pack. This query was originally [submitted as an experimental query by @artem-smotrakov](https://github.com/github/codeql/pull/6357).

0 commit comments

Comments
 (0)