-
Notifications
You must be signed in to change notification settings - Fork 11
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
WIP: Code for generating ecdsa secp256r1 objects #133
base: main
Are you sure you want to change the base?
Conversation
ties
commented
Sep 1, 2023
- I have updated the changelog in README.md
|
||
public KeyPair generate() { | ||
try { | ||
final KeyPairGenerator generator = KeyPairGenerator.getInstance(ALGORITHM, provider); |
Check failure
Code scanning / CodeQL
Use of a potentially broken or risky cryptographic algorithm High
EC
|
||
private static final PregeneratedEcKeyPairFactory INSTANCE = new PregeneratedEcKeyPairFactory("SunEC"); | ||
|
||
private static final char[] PASSPHRASE = "passphrase".toCharArray(); |
Check failure
Code scanning / CodeQL
Hard-coded credential in API call Critical test
sensitive API call
Hard-coded value flows to
sensitive API call
Hard-coded value flows to
sensitive API call
Hard-coded value flows to
sensitive API call
Hard-coded value flows to
sensitive API call
While profile-15 contains text for implicit tags, this was a mistake and all other sample objects have explicit tags. This was changed later.
@@ -108,6 +110,14 @@ | |||
Validate.notNull(resources, "no resources"); | |||
Validate.isTrue(!resources.isEmpty(), "empty resources"); | |||
} | |||
|
|||
if (builderHelper.getSigningKeyPair().getPublic().getAlgorithm() == "EC") { |
Check warning
Code scanning / CodeQL
Reference equality test on strings Warning