Re: SonarLint complaining about "Use a stronger padding scheme"
Frank Sapone <[email protected]> Mon, 15 Apr 2024 05:27:10 -0700 (PDT)
| Newsgroups | gmane.comp.encryption.cryptopp |
|---|---|
| Message-ID | <[email protected]> |
------=_Part_176118_1813903776.1713184030239 Content-Type: multipart/alternative; boundary="----=_Part_176119_378562086.1713184030239" ------=_Part_176119_378562086.1713184030239 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable NVM, it appears PSSR is considered more secure and this should work with=20 the verifier. Thanks, Frank On Friday, April 12, 2024 at 12:20:56=E2=80=AFPM UTC-4 Jeffrey Walton wrote= : > On Friday, April 12, 2024 at 12:19:32=E2=80=AFPM UTC-4 [email protected]= om wrote: > > Hello, I am using Windows 10 Professional x64 with CryptoPP 8.9.0. It is= =20 > built with Visual Studio. We started using SonarQube/SonarLint for SCA= =20 > during compile and it's been complaining "Use a stronger padding scheme".= =20 > Specifically it sees this line:=20 > > RSASS<PKCS1v15, SHA256>::Verifier verifier(publicKey); > > and complains about the PCKS1v15. I don't know how to change it to a=20 > different type and what other ones are available. It suggests OAEP for R= SA=20 > which is what I assume we want. > > > https://www.cryptopp.com/wiki/RSA_Encryption_Schemes > > Jeff > --=20 You received this message because you are subscribed to the Google Groups "= Crypto++ Users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/= cryptopp-users/f3f3f21d-4766-48f9-b987-83ee37c7666fn%40googlegroups.com. ------=_Part_176119_378562086.1713184030239 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable NVM, it appears PSSR is considered more secure and this should work with th= e verifier.<div><br /></div><div>Thanks,<br />Frank<br /><br /></div><div c= lass=3D"gmail_quote"><div dir=3D"auto" class=3D"gmail_attr">On Friday, Apri= l 12, 2024 at 12:20:56=E2=80=AFPM UTC-4 Jeffrey Walton wrote:<br/></div><bl= ockquote class=3D"gmail_quote" style=3D"margin: 0 0 0 0.8ex; border-left: 1= px solid rgb(204, 204, 204); padding-left: 1ex;"><div><div dir=3D"auto">On = Friday, April 12, 2024 at 12:19:32=E2=80=AFPM UTC-4 <a href data-email-mask= ed rel=3D"nofollow">[email protected]</a> wrote:<br></div><blockquote st= yle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padd= ing-left:1ex">Hello, I am using Windows 10 Professional x64 with CryptoPP 8= .9.0. =C2=A0It is built with Visual Studio. =C2=A0We started using SonarQub= e/SonarLint for SCA during compile and it's been complaining "Use = a stronger padding scheme". =C2=A0Specifically it sees this line: <br>= <br>RSASS<PKCS1v15, SHA256>::Verifier verifier(publicKey);<br><br>and= complains about the PCKS1v15. =C2=A0I don't know how to change it to a= different type and what other ones are available. =C2=A0It suggests OAEP f= or RSA which is what I assume we want.<br></blockquote><div><br></div></div= ><div><div><a href=3D"https://www.cryptopp.com/wiki/RSA_Encryption_Schemes"= target=3D"_blank" rel=3D"nofollow" data-saferedirecturl=3D"https://www.goo= gle.com/url?hl=3Den-US&q=3Dhttps://www.cryptopp.com/wiki/RSA_Encryption= _Schemes&source=3Dgmail&ust=3D1713269876437000&usg=3DAOvVaw24Fw= On172dGURktHU37tmn">https://www.cryptopp.com/wiki/RSA_Encryption_Schemes</a= ></div><div><br></div><div>Jeff<br></div></div></blockquote></div> <p></p> -- <br /> You received this message because you are subscribed to the Google Groups &= quot;Crypto++ Users" group.<br /> To unsubscribe from this group and stop receiving emails from it, send an e= mail to <a href=3D"mailto:[email protected]">cryp= [email protected]</a>.<br /> To view this discussion on the web visit <a href=3D"https://groups.google.c= om/d/msgid/cryptopp-users/f3f3f21d-4766-48f9-b987-83ee37c7666fn%40googlegro= ups.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/d= /msgid/cryptopp-users/f3f3f21d-4766-48f9-b987-83ee37c7666fn%40googlegroups.= com</a>.<br /> ------=_Part_176119_378562086.1713184030239-- ------=_Part_176118_1813903776.1713184030239--