Re: SonarLint complaining about "Use a stronger padding scheme"

Jeffrey Walton <[email protected]> Fri, 12 Apr 2024 09:20:56 -0700 (PDT)
Newsgroups gmane.comp.encryption.cryptopp
Message-ID <[email protected]>
------=_Part_295676_182338207.1712938856245
Content-Type: multipart/alternative; 
	boundary="----=_Part_295677_233376733.1712938856245"

------=_Part_295677_233376733.1712938856245
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable



On Friday, April 12, 2024 at 12:19:32=E2=80=AFPM UTC-4 [email protected]=
 wrote:

Hello, I am using Windows 10 Professional x64 with CryptoPP 8.9.0.  It is=
=20
built with Visual Studio.  We started using SonarQube/SonarLint for SCA=20
during compile and it's been complaining "Use a stronger padding scheme".=
=20
 Specifically it sees this line:=20

RSASS<PKCS1v15, SHA256>::Verifier verifier(publicKey);

and complains about the PCKS1v15.  I don't know how to change it to a=20
different type and what other ones are available.  It suggests OAEP for RSA=
=20
which is what I assume we want.


https://www.cryptopp.com/wiki/RSA_Encryption_Schemes

Jeff

--=20
You received this message because you are subscribed to the Google Groups "=
Crypto++ Users" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/=
cryptopp-users/de98be33-4f9c-45aa-a1fe-570d4a534b68n%40googlegroups.com.

------=_Part_295677_233376733.1712938856245
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<br /><br /><div><div dir=3D"auto">On Friday, April 12, 2024 at 12:19:32=E2=
=80=AFPM UTC-4 [email protected] wrote:<br /></div><blockquote style=3D"=
margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); paddi=
ng-left: 1ex;">Hello, I am using Windows 10 Professional x64 with CryptoPP =
8.9.0. =C2=A0It is built with Visual Studio. =C2=A0We started using SonarQu=
be/SonarLint for SCA during compile and it's been complaining "Use a strong=
er padding scheme". =C2=A0Specifically it sees this line: <br /><br />RSASS=
&lt;PKCS1v15, SHA256&gt;::Verifier verifier(publicKey);<br /><br />and comp=
lains about the PCKS1v15. =C2=A0I don't know how to change it to a differen=
t type and what other ones are available. =C2=A0It suggests OAEP for RSA wh=
ich is what I assume we want.<br /></blockquote><div><br /></div><div>https=
://www.cryptopp.com/wiki/RSA_Encryption_Schemes</div><div><br /></div><div>=
Jeff<br /></div></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;Crypto++ Users&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">cryp=
[email protected]</a>.<br />
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/d/msgid/cryptopp-users/de98be33-4f9c-45aa-a1fe-570d4a534b68n%40googlegro=
ups.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/d=
/msgid/cryptopp-users/de98be33-4f9c-45aa-a1fe-570d4a534b68n%40googlegroups.=
com</a>.<br />

------=_Part_295677_233376733.1712938856245--

------=_Part_295676_182338207.1712938856245--