Skip to content

Commit e8f027d

Browse files
Apply docs suggestions from code review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
1 parent 5d00b87 commit e8f027d

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

java/ql/src/Security/CWE/CWE-780/RsaWithoutOaep.qhelp

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@
22
<qhelp>
33

44
<overview>
5-
<p>Cryptographic algorithms often use padding schemes to make the plaintext less predictable. The OAEP scheme (Optimal Asymmetric Encryption Padding) should be used with RSA encryption.
6-
Using no padding or an outdated padding scheme such as PKCS1 can weaken the encryption by making it vulnerable to a padding oracle attack.
5+
<p>Cryptographic algorithms often use padding schemes to make the plaintext less predictable. The OAEP (Optimal Asymmetric Encryption Padding) scheme should be used with RSA encryption.
6+
Using an outdated padding scheme such as PKCS1, or no padding at all, can weaken the encryption by making it vulnerable to a padding oracle attack.
77
</p>
88
</overview>
99

java/ql/src/Security/CWE/CWE-780/RsaWithoutOaep.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
22
* @name Use of RSA algorithm without OAEP
3-
* @description Using RSA encryption without OAEP padding can lead to a padding oracle attack, weakening the encryption.
3+
* @description Using RSA encryption without OAEP padding can result in a padding oracle attack, leading to a weaker encryption.
44
* @kind path-problem
55
* @problem.severity warning
66
* @security-severity 7.5

0 commit comments

Comments
 (0)