SonarLint complaining about "Use a stronger padding scheme"
Frank Sapone <[email protected]> Fri, 12 Apr 2024 08:40:45 -0700 (PDT)
| Newsgroups | gmane.comp.encryption.cryptopp |
|---|---|
| Message-ID | <[email protected]> |
------=_Part_150494_645575918.1712936445160 Content-Type: multipart/alternative; boundary="----=_Part_150495_234488431.1712936445160" ------=_Part_150495_234488431.1712936445160 Content-Type: text/plain; charset="UTF-8" Hello, I am using Windows 10 Professional x64 with CryptoPP 8.9.0. It is built with Visual Studio. We started using SonarQube/SonarLint for SCA during compile and it's been complaining "Use a stronger padding scheme". Specifically it sees this line: RSASS<PKCS1v15, SHA256>::Verifier verifier(publicKey); and complains about the PCKS1v15. I don't know how to change it to a different type and what other ones are available. It suggests OAEP for RSA which is what I assume we want. Thanks, Frank -- You received this message because you are subscribed to the Google Groups "Crypto++ Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/cryptopp-users/74fc298a-ba72-4e59-bd3e-29df2e611da2n%40googlegroups.com. ------=_Part_150495_234488431.1712936445160 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello, I am using Windows 10 Professional x64 with CryptoPP 8.9.0. =C2=A0It= is built with Visual Studio. =C2=A0We started using SonarQube/SonarLint fo= r SCA during compile and it's been complaining "Use a stronger padding sche= me". =C2=A0Specifically it sees this line: <br /><br />RSASS<PKCS1v15, S= HA256>::Verifier verifier(publicKey);<br /><br />and complains about the= PCKS1v15. =C2=A0I don't know how to change it to a different type and what= other ones are available. =C2=A0It suggests OAEP for RSA which is what I a= ssume we want.<br /><div><br /></div><div>Thanks,<br />Frank</div> <p></p> -- <br /> You received this message because you are subscribed to the Google Groups &= quot;Crypto++ Users" group.<br /> To unsubscribe from this group and stop receiving emails from it, send an e= mail to <a href=3D"mailto:[email protected]">cryp= [email protected]</a>.<br /> To view this discussion on the web visit <a href=3D"https://groups.google.c= om/d/msgid/cryptopp-users/74fc298a-ba72-4e59-bd3e-29df2e611da2n%40googlegro= ups.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/d= /msgid/cryptopp-users/74fc298a-ba72-4e59-bd3e-29df2e611da2n%40googlegroups.= com</a>.<br /> ------=_Part_150495_234488431.1712936445160-- ------=_Part_150494_645575918.1712936445160--