You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
verboseWriter.LogSignatureMessage(signature,"Signature uses ECDSA with an unknown curve.");
30
+
result=RuleResult.Fail;
34
31
//We don't actually check the key size for ECDSA since all known values are acceptable.
35
32
break;
36
-
casePublicKeyAlgorithm.RSA:
37
-
if(keyInfo.BitSize==null)
38
-
{
39
-
verboseWriter.LogSignatureMessage(signature,"Signature has an unknown RSA key size.");
40
-
result=RuleResult.Fail;
41
-
}
42
-
elseif(keyInfo.BitSize<MIN_RSADSA_KEY_SIZE)
43
-
{
44
-
verboseWriter.LogSignatureMessage(signature,$"Signature uses a RSA key of size {keyInfo.BitSize} which is below the recommended {MIN_RSADSA_KEY_SIZE}.");
verboseWriter.LogSignatureMessage(signature,$"Signature uses a RSA key of size {keyInfo.BitSize} which is below the recommended {MIN_RSADSA_KEY_SIZE}.");
39
+
result=RuleResult.Fail;
47
40
break;
48
-
casePublicKeyAlgorithm.DSA:
49
-
if(keyInfo.BitSize==null)
50
-
{
51
-
verboseWriter.LogSignatureMessage(signature,"Signature has an unknown DSA key size.");
52
-
result=RuleResult.Fail;
53
-
}
54
-
elseif(keyInfo.BitSize<MIN_RSADSA_KEY_SIZE)
55
-
{
56
-
//Effectively, 1024 is the max for a DSA key, so this will likely always fail.
57
-
verboseWriter.LogSignatureMessage(signature,$"Signature uses a DSA key of size {keyInfo.BitSize} which is below the recommended {MIN_RSADSA_KEY_SIZE}.");
//Effectively, 1024 is the max for a DSA key, so this will likely always fail.
47
+
verboseWriter.LogSignatureMessage(signature,$"Signature uses a DSA key of size {keyInfo.BitSize} which is below the recommended {MIN_RSADSA_KEY_SIZE}.");
48
+
result=RuleResult.Fail;
60
49
break;
61
-
casePublicKeyAlgorithm.Other:
62
-
gotodefault;
63
50
default:
64
51
verboseWriter.LogSignatureMessage(signature,$"Signature uses an unknown algorithm.");
verboseWriter.LogSignatureMessage(signature,"Signature uses ECDSA with an unknown curve.");
33
-
result=RuleResult.Fail;
34
-
}
35
-
elseif(keyInfo.BitSize>MAX_ECDSA_KEY_SIZE)
36
-
{
37
-
verboseWriter.LogSignatureMessage(signature,$"Signature uses ECDSA signature with a key size of {keyInfo.BitSize} exeeding maximum size of {MAX_ECDSA_KEY_SIZE}.");
verboseWriter.LogSignatureMessage(signature,"Signature uses ECDSA with an unknown curve.");
31
+
result=RuleResult.Fail;
40
32
break;
41
-
casePublicKeyAlgorithm.RSA:
42
-
if(keyInfo.BitSize==null)
43
-
{
44
-
verboseWriter.LogSignatureMessage(signature,"Signature has an unknown RSA key size.");
45
-
result=RuleResult.Fail;
46
-
}
47
-
elseif(keyInfo.BitSize>MAX_RSA_KEY_SIZE)
48
-
{
49
-
verboseWriter.LogSignatureMessage(signature,$"Signature uses RSA signature with a key size of {keyInfo.BitSize} exeeding maximum size of {MAX_RSA_KEY_SIZE}.");
verboseWriter.LogSignatureMessage(signature,$"Signature uses ECDSA signature with a key size of {keyInfo.BitSize} exeeding maximum size of {MAX_ECDSA_KEY_SIZE}.");
35
+
result=RuleResult.Fail;
52
36
break;
53
-
casePublicKeyAlgorithm.DSA:
54
-
if(keyInfo.BitSize==null)
55
-
{
56
-
verboseWriter.LogSignatureMessage(signature,"Signature has an unknown DSA key size.");
57
-
result=RuleResult.Fail;
58
-
}
59
-
elseif(keyInfo.BitSize>MAX_DSA_KEY_SIZE)
60
-
{
61
-
verboseWriter.LogSignatureMessage(signature,$"Signature uses DSA signature with a key size of {keyInfo.BitSize} exeeding maximum size of {MAX_DSA_KEY_SIZE}.");
verboseWriter.LogSignatureMessage(signature,$"Signature uses RSA signature with a key size of {keyInfo.BitSize} exeeding maximum size of {MAX_RSA_KEY_SIZE}.");
verboseWriter.LogSignatureMessage(signature,$"Signature uses DSA signature with a key size of {keyInfo.BitSize} exeeding maximum size of {MAX_DSA_KEY_SIZE}.");
51
+
result=RuleResult.Fail;
64
52
break;
65
-
casePublicKeyAlgorithm.Other:
66
-
gotodefault;
67
53
default:
68
54
verboseWriter.LogSignatureMessage(signature,$"Signature uses an unknown algorithm.");
0 commit comments