ast-grep-essentials/tests/python/insecure-cipher-algorithm-rc4-python-test.yml at main · coderabbitai/ast-grep-essentials · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
id: insecure-cipher-algorithm-rc4-python
valid:
  - |
    cipher = AES.new(key, AES.MODE_EAX, nonce=nonce)
    plaintext = cipher.decrypt(ciphertext)
    try:
    cipher.verify(tag)
    print("The message is authentic:", plaintext)
    except ValueError:
    print("Key incorrect or message corrupted")

invalid:
  - |
    from Cryptodome.Cipher import ARC4 as pycryptodomex_arc4
    cipher = pycryptodomex_arc4.new(tempkey)
  - |
    from Crypto.Cipher import ARC4 as pycrypto_arc4
    cipher = pycrypto_arc4.new(tempkey)
  - |
     Crypto.Cipher.ARC4.new()
  - |
     Crypto.Cipher.ARC4.new(adasfdasfs)
  - |
     Cryptodome.Cipher.ARC4.new()
  - |
     Cryptodome.Cipher.ARC4.new(asdsd)