Skip to content

Use of weak hmac alg#348

Merged
MathiasVP merged 4 commits intomainfrom
users/chanely/weak-hmac
Apr 22, 2026
Merged

Use of weak hmac alg#348
MathiasVP merged 4 commits intomainfrom
users/chanely/weak-hmac

Conversation

@chanel-y
Copy link
Copy Markdown

No description provided.

chanel-y and others added 2 commits April 9, 2026 09:26
Detects HMACMD5, HMACSHA1, and HMACRIPEMD160 usage via New-Object,
static Create(), and ::new() patterns.

Covers: Cryptography.10020 (CWE-327, CWE-328)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copy link
Copy Markdown
Collaborator

@MathiasVP MathiasVP left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Two small comments, but otherwise this LGTM!

Comment thread powershell/ql/src/queries/security/cwe-327/WeakHmac.ql
Copy link
Copy Markdown
Collaborator

@MathiasVP MathiasVP left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@MathiasVP MathiasVP enabled auto-merge April 22, 2026 07:47
@MathiasVP MathiasVP merged commit c76571c into main Apr 22, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants