@quantakrypto/core 0.4.2 → 0.4.3

package/dist/detectors/go.d.ts

@@ -6,11 +6,13 @@
  * `ecdsa.SignASN1`, `ecdh.X25519`, …) are precise, low-false-positive signals.
  *
  * Covered:
- *   - crypto/rsa   — GenerateKey, EncryptOAEP/PKCS1v15, SignPKCS1v15/PSS
- *   - crypto/ecdsa — GenerateKey, Sign/SignASN1
+ *   - crypto/rsa   — GenerateKey, EncryptOAEP/PKCS1v15, SignPKCS1v15/PSS, DecryptOAEP, VerifyPKCS1v15/PSS
+ *   - crypto/ecdsa — GenerateKey, Sign/SignASN1, Verify/VerifyASN1
  *   - crypto/ecdh  — P256/P384/P521/X25519 curve construction (key agreement)
- *   - crypto/ed25519 — GenerateKey, Sign
+ *   - crypto/elliptic — GenerateKey / ScalarMult (classic pre-1.20 ECDH)
+ *   - crypto/ed25519 — GenerateKey, Sign, Verify
  *   - crypto/dsa   — GenerateKey, GenerateParameters (deprecated)
+ *   - crypto/tls   — InsecureSkipVerify, legacy MinVersion (transport config hygiene)
  *
  * HNDL policy mirrors the other detectors: KEM / key agreement (RSA encryption,
  * ECDH) is harvest-now-decrypt-later exposed (hndl:true); signatures (RSA-sign,

package/dist/detectors/go.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"go.d.ts","sourceRoot":"","sources":["../../src/detectors/go.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAC;AA8G/D,oFAAoF;AACpF,eAAO,MAAM,UAAU,EAAE,QAkCxB,CAAC"}
+{"version":3,"file":"go.d.ts","sourceRoot":"","sources":["../../src/detectors/go.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAC;AAqR/D,oFAAoF;AACpF,eAAO,MAAM,UAAU,EAAE,QAoExB,CAAC"}

package/dist/detectors/go.js

@@ -1,5 +1,5 @@
 import { GO_EXTENSIONS, eachMatch, findingFromRule, hasExtension } from "../detect-utils.js";
-import { CWE_BROKEN_CRYPTO } from "../cwe.js";
+import { CWE_BROKEN_CRYPTO, CWE_CERT_VALIDATION, CWE_WEAK_STRENGTH } from "../cwe.js";
 /* -------------------------------------------------------------------------- */
 /* Precompiled regexes (module scope)                                         */
 /* -------------------------------------------------------------------------- */
@@ -7,9 +7,36 @@ const RE_GO_RSA_KEYGEN = /\brsa\.GenerateKey\s*\(|\brsa\.GenerateMultiPrimeKey\s
 const RE_GO_RSA_ENCRYPT = /\brsa\.EncryptOAEP\s*\(|\brsa\.EncryptPKCS1v15\s*\(/g;
 const RE_GO_RSA_SIGN = /\brsa\.SignPKCS1v15\s*\(|\brsa\.SignPSS\s*\(/g;
 const RE_GO_ECDSA = /\becdsa\.GenerateKey\s*\(|\becdsa\.SignASN1\s*\(|\becdsa\.Sign\s*\(/g;
-const RE_GO_ECDH = /\becdh\.(?:P256|P384|P521|X25519)\s*\(/g;
+const RE_GO_ECDH = /\becdh\.(?:P256|P384|P521)\s*\(/g;
+// X25519 gets its own family (algorithm "X25519", lower severity) to match how
+// every other pack classifies it — Go was the lone site reporting it as ECDH/high
+// (audit F9). Still key-exchange + hndl:true.
+const RE_GO_X25519 = /\becdh\.X25519\s*\(/g;
 const RE_GO_ED25519 = /\bed25519\.GenerateKey\s*\(|\bed25519\.Sign\s*\(/g;
 const RE_GO_DSA = /\bdsa\.GenerateKey\s*\(|\bdsa\.GenerateParameters\s*\(/g;
+// Verify / decrypt call sites — the inverse operations the Sign/Encrypt/
+// GenerateKey rules above miss today (audit F4/F6). Deliberately disjoint from
+// those rules to avoid double-counting: DecryptOAEP≠EncryptOAEP, Verify*≠Sign*.
+const RE_GO_RSA_DECRYPT = /\brsa\.DecryptOAEP\s*\(/g;
+const RE_GO_RSA_VERIFY = /\brsa\.VerifyPKCS1v15\s*\(|\brsa\.VerifyPSS\s*\(/g;
+const RE_GO_ECDSA_VERIFY = /\becdsa\.Verify(?:ASN1)?\s*\(/g;
+const RE_GO_ED25519_VERIFY = /\bed25519\.Verify\s*\(/g;
+// Classic pre-1.20 elliptic-curve key agreement (crypto/elliptic), superseded by
+// crypto/ecdh but still widespread. GenerateKey + ScalarMult are the low-level
+// ECDH building blocks the crypto/ecdh rule does not see. `.ScalarMult(` is an
+// unqualified method call, so this rule carries medium confidence.
+const RE_GO_ECDH_CLASSIC = /\belliptic\.GenerateKey\s*\(|\.ScalarMult\s*\(/g;
+// Go TLS misconfiguration (crypto/tls). Mirrors the JS tlsDetector: disabled
+// certificate verification and a legacy TLS/SSL version floor.
+const RE_GO_TLS_SKIP_VERIFY = /InsecureSkipVerify:\s*true/g;
+const RE_GO_TLS_LEGACY_VERSION = /MinVersion:\s*tls\.Version(?:TLS1[01]|SSL30)/g;
+// Identifier-form golang-jwt signing methods (audit gap: the quoted "RS256" alg
+// token is caught by the language-agnostic jwt-jose detector, but golang-jwt
+// passes the alg as an EXPORTED IDENTIFIER — `jwt.SigningMethodRS256`,
+// `jwt.SigningMethodES256`, `jwt.SigningMethodEdDSA` — which the string rule
+// misses. RS*/PS* → RSA, ES* → ECDSA, EdDSA → EdDSA. The `\b`s keep it precise:
+// HS* HMAC methods and longer look-alikes (`SigningMethodRS2560`) do not match.
+const RE_GO_JWT_SIGNINGMETHOD = /\bSigningMethod(RS|PS|ES)(?:256|384|512)\b|\bSigningMethodEdDSA\b/g;
 /* -------------------------------------------------------------------------- */
 /* Rule catalog                                                               */
 /* -------------------------------------------------------------------------- */
@@ -66,7 +93,7 @@ const RULE_GO_ECDSA = {
 const RULE_GO_ECDH = {
     id: "go-ecdh",
     title: "Go ECDH key exchange",
-    description: "crypto/ecdh P256/P384/P521/X25519 key agreement",
+    description: "crypto/ecdh P256/P384/P521 key agreement",
     category: "key-exchange",
     severity: "high",
     confidence: "high",
@@ -75,6 +102,18 @@ const RULE_GO_ECDH = {
     cwe: CWE_BROKEN_CRYPTO,
     message: "Elliptic-curve Diffie-Hellman (Go crypto/ecdh) is broken by Shor's algorithm (harvest-now-decrypt-later).",
 };
+const RULE_GO_X25519 = {
+    id: "go-x25519",
+    title: "Go X25519 key exchange",
+    description: "crypto/ecdh X25519 key agreement",
+    category: "key-exchange",
+    severity: "medium",
+    confidence: "high",
+    algorithm: "X25519",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "X25519 (Go crypto/ecdh) is modern but still classical key agreement — harvest-now-decrypt-later.",
+};
 const RULE_GO_ED25519 = {
     id: "go-ed25519",
     title: "Go Ed25519 signature",
@@ -100,6 +139,124 @@ const RULE_GO_DSA = {
     message: "Classical DSA (Go) is deprecated and forgeable by a quantum attacker.",
     remediation: "Rotate off DSA and migrate to ML-DSA-65 (FIPS 204).",
 };
+const RULE_GO_RSA_DECRYPT = {
+    id: "go-rsa-decrypt",
+    title: "Go RSA public-key decryption",
+    description: "crypto/rsa DecryptOAEP",
+    category: "kem",
+    severity: "high",
+    confidence: "high",
+    algorithm: "RSA",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "RSA public-key decryption (Go) recovers data protected by a classical KEM — harvest-now-decrypt-later exposed.",
+};
+const RULE_GO_RSA_VERIFY = {
+    id: "go-rsa-verify",
+    title: "Go RSA signature verification",
+    description: "crypto/rsa VerifyPKCS1v15 / VerifyPSS",
+    category: "signature",
+    severity: "high",
+    confidence: "high",
+    algorithm: "RSA",
+    hndl: false,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "Verifies classical RSA signatures (Go), which are forgeable by a quantum attacker.",
+    remediation: "ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205)",
+};
+const RULE_GO_ECDSA_VERIFY = {
+    id: "go-ecdsa-verify",
+    title: "Go ECDSA signature verification",
+    description: "crypto/ecdsa Verify / VerifyASN1",
+    category: "signature",
+    severity: "high",
+    confidence: "high",
+    algorithm: "ECDSA",
+    hndl: false,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "Verifies classical ECDSA signatures (Go), which are forgeable by a quantum attacker.",
+    remediation: "ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205)",
+};
+const RULE_GO_ED25519_VERIFY = {
+    id: "go-ed25519-verify",
+    title: "Go Ed25519 signature verification",
+    description: "crypto/ed25519 Verify",
+    category: "signature",
+    severity: "low",
+    confidence: "high",
+    algorithm: "EdDSA",
+    hndl: false,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "Verifies Ed25519 signatures (Go) — modern but still classical and quantum-forgeable.",
+};
+const RULE_GO_ECDH_CLASSIC = {
+    id: "go-ecdh-classic",
+    title: "Go classic EC key agreement (crypto/elliptic)",
+    description: "crypto/elliptic GenerateKey / ScalarMult (pre-1.20 ECDH)",
+    category: "key-exchange",
+    severity: "high",
+    confidence: "medium",
+    algorithm: "ECDH",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "Low-level elliptic-curve key agreement (Go crypto/elliptic) is broken by Shor's algorithm (harvest-now-decrypt-later).",
+};
+const RULE_GO_TLS_SKIP_VERIFY = {
+    id: "go-tls-insecure-skip-verify",
+    title: "Go TLS certificate verification disabled",
+    description: "crypto/tls Config InsecureSkipVerify: true",
+    category: "tls",
+    severity: "high",
+    confidence: "high",
+    hndl: false,
+    cwe: CWE_CERT_VALIDATION,
+    message: "InsecureSkipVerify:true disables TLS certificate verification (Go) — MITM risk.",
+    remediation: "Remove InsecureSkipVerify:true; verify certificates properly.",
+};
+const RULE_GO_TLS_LEGACY_VERSION = {
+    id: "go-tls-legacy-version",
+    title: "Go legacy TLS version pinned",
+    description: "crypto/tls MinVersion pinned to TLS 1.0/1.1 or SSL 3.0",
+    category: "tls",
+    severity: "medium",
+    confidence: "high",
+    hndl: false,
+    cwe: CWE_WEAK_STRENGTH,
+    message: "MinVersion pins a deprecated TLS/SSL floor (TLS 1.0/1.1 or SSL 3.0) in Go; require TLS 1.3.",
+    remediation: "Set MinVersion: tls.VersionTLS13 and prefer PQC-hybrid key exchange.",
+};
+const RULE_GO_JWT_SIGNINGMETHOD = {
+    id: "go-jwt-signingmethod",
+    title: "Go identifier-form JWT signing method",
+    description: "golang-jwt SigningMethodRS/PS/ES* / SigningMethodEdDSA identifier",
+    category: "signature",
+    severity: "high",
+    confidence: "high",
+    algorithm: "unknown", // representative umbrella; refined per-match (RSA/ECDSA/EdDSA)
+    hndl: false,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "A classical JWT signature algorithm (Go golang-jwt, identifier form) is used, forgeable by a quantum attacker.",
+    remediation: "ML-DSA-65 (FIPS 204); track IETF PQC JOSE/COSE algorithms",
+};
+// The x509 PEM/DER key + certificate layer: parsing/marshalling classical RSA,
+// EC and PKIX key material and X.509 certificates. This is the "handles classical
+// keys" surface the Sign/Verify/GenerateKey rules miss — a key-loading utility
+// (`x509.ParsePKCS8PrivateKey`) touches quantum-vulnerable material without ever
+// naming rsa/ecdsa. Family is ambiguous at the parse site, so `unknown`.
+const RE_GO_X509_PARSE = /\bx509\.(?:ParsePKCS1PrivateKey|ParsePKCS8PrivateKey|ParsePKIXPublicKey|ParseECPrivateKey|ParsePKCS1PublicKey|MarshalPKCS1PrivateKey|MarshalPKCS8PrivateKey|MarshalPKIXPublicKey|MarshalECPrivateKey|ParseCertificates?|ParseCertificateRequest|CreateCertificate|CreateCertificateRequest)\b/g;
+const RULE_GO_X509_PARSE = {
+    id: "go-x509-parse",
+    title: "Go x509 classical key/certificate handling",
+    description: "x509.Parse*/Marshal*/Create* for RSA/EC/PKIX keys and X.509 certificates",
+    category: "certificate",
+    severity: "medium",
+    confidence: "medium",
+    algorithm: "unknown",
+    hndl: false,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "This code parses/marshals classical asymmetric key or X.509 certificate material (x509.*), a quantum forgery/harvest surface.",
+    remediation: "Inventory the key/cert types handled here; plan PQC (ML-DSA) certificate + key migration.",
+};
 /** Detects classical asymmetric crypto in Go source (crypto/* standard library). */
 export const goDetector = {
     id: "go-crypto",
@@ -112,8 +269,18 @@ export const goDetector = {
         RULE_GO_RSA_SIGN,
         RULE_GO_ECDSA,
         RULE_GO_ECDH,
+        RULE_GO_X25519,
         RULE_GO_ED25519,
         RULE_GO_DSA,
+        RULE_GO_RSA_DECRYPT,
+        RULE_GO_RSA_VERIFY,
+        RULE_GO_ECDSA_VERIFY,
+        RULE_GO_ED25519_VERIFY,
+        RULE_GO_ECDH_CLASSIC,
+        RULE_GO_TLS_SKIP_VERIFY,
+        RULE_GO_TLS_LEGACY_VERSION,
+        RULE_GO_JWT_SIGNINGMETHOD,
+        RULE_GO_X509_PARSE,
     ],
     appliesTo: (f) => hasExtension(f, GO_EXTENSIONS),
     detect({ file, content }) {
@@ -124,8 +291,25 @@ export const goDetector = {
         add(RE_GO_RSA_SIGN, RULE_GO_RSA_SIGN);
         add(RE_GO_ECDSA, RULE_GO_ECDSA);
         add(RE_GO_ECDH, RULE_GO_ECDH);
+        add(RE_GO_X25519, RULE_GO_X25519);
         add(RE_GO_ED25519, RULE_GO_ED25519);
         add(RE_GO_DSA, RULE_GO_DSA);
+        add(RE_GO_RSA_DECRYPT, RULE_GO_RSA_DECRYPT);
+        add(RE_GO_RSA_VERIFY, RULE_GO_RSA_VERIFY);
+        add(RE_GO_ECDSA_VERIFY, RULE_GO_ECDSA_VERIFY);
+        add(RE_GO_ED25519_VERIFY, RULE_GO_ED25519_VERIFY);
+        add(RE_GO_ECDH_CLASSIC, RULE_GO_ECDH_CLASSIC);
+        add(RE_GO_TLS_SKIP_VERIFY, RULE_GO_TLS_SKIP_VERIFY);
+        add(RE_GO_TLS_LEGACY_VERSION, RULE_GO_TLS_LEGACY_VERSION);
+        add(RE_GO_X509_PARSE, RULE_GO_X509_PARSE);
+        // Identifier-form golang-jwt signing methods (jwt.SigningMethodRS256, …).
+        // Refine the umbrella "unknown" algorithm per match: m[1] is the RS/PS/ES
+        // prefix (RS/PS → RSA, ES → ECDSA); when it is undefined the EdDSA branch
+        // matched, so the family is EdDSA.
+        eachMatch(RE_GO_JWT_SIGNINGMETHOD, content, (m) => {
+            const algorithm = m[1] === "ES" ? "ECDSA" : m[1] ? "RSA" : "EdDSA";
+            findings.push(findingFromRule(RULE_GO_JWT_SIGNINGMETHOD, { file, content, index: m.index, matchLength: m[0].length }, { algorithm }));
+        });
         return findings;
     },
 };

package/dist/detectors/go.js.map

@@ -1 +1 @@
-{"version":3,"file":"go.js","sourceRoot":"","sources":["../../src/detectors/go.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,MAAM,gBAAgB,GAAG,4DAA4D,CAAC;AACtF,MAAM,iBAAiB,GAAG,sDAAsD,CAAC;AACjF,MAAM,cAAc,GAAG,+CAA+C,CAAC;AACvE,MAAM,WAAW,GAAG,sEAAsE,CAAC;AAC3F,MAAM,UAAU,GAAG,yCAAyC,CAAC;AAC7D,MAAM,aAAa,GAAG,mDAAmD,CAAC;AAC1E,MAAM,SAAS,GAAG,yDAAyD,CAAC;AAE5E,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,MAAM,kBAAkB,GAAa;IACnC,EAAE,EAAE,eAAe;IACnB,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EAAE,gDAAgD;IAC7D,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,qEAAqE;CAC/E,CAAC;AACF,MAAM,mBAAmB,GAAa;IACpC,EAAE,EAAE,gBAAgB;IACpB,KAAK,EAAE,8BAA8B;IACrC,WAAW,EAAE,0CAA0C;IACvD,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,wGAAwG;CAC3G,CAAC;AACF,MAAM,gBAAgB,GAAa;IACjC,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,kBAAkB;IACzB,WAAW,EAAE,mCAAmC;IAChD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,gEAAgE;IACzE,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,aAAa,GAAa;IAC9B,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EAAE,4CAA4C;IACzD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,0DAA0D;IACnE,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,YAAY,GAAa;IAC7B,EAAE,EAAE,SAAS;IACb,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,iDAAiD;IAC9D,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,2GAA2G;CAC9G,CAAC;AACF,MAAM,eAAe,GAAa;IAChC,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,mCAAmC;IAChD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,gEAAgE;CAC1E,CAAC;AACF,MAAM,WAAW,GAAa;IAC5B,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,kBAAkB;IACzB,WAAW,EAAE,6CAA6C;IAC1D,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,uEAAuE;IAChF,WAAW,EAAE,qDAAqD;CACnE,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,UAAU,GAAa;IAClC,EAAE,EAAE,WAAW;IACf,WAAW,EAAE,2EAA2E;IACxF,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE;QACL,kBAAkB;QAClB,mBAAmB;QACnB,gBAAgB;QAChB,aAAa;QACb,YAAY;QACZ,eAAe;QACf,WAAW;KACZ;IACD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC;IAChD,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,IAAc,EAAE,EAAE,CACzC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3B,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CACnF,CACF,CAAC;QAEJ,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAC1C,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QAC5C,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACtC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAChC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9B,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QACpC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAE5B,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}
+{"version":3,"file":"go.js","sourceRoot":"","sources":["../../src/detectors/go.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEtF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,MAAM,gBAAgB,GAAG,4DAA4D,CAAC;AACtF,MAAM,iBAAiB,GAAG,sDAAsD,CAAC;AACjF,MAAM,cAAc,GAAG,+CAA+C,CAAC;AACvE,MAAM,WAAW,GAAG,sEAAsE,CAAC;AAC3F,MAAM,UAAU,GAAG,kCAAkC,CAAC;AACtD,+EAA+E;AAC/E,kFAAkF;AAClF,8CAA8C;AAC9C,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAC5C,MAAM,aAAa,GAAG,mDAAmD,CAAC;AAC1E,MAAM,SAAS,GAAG,yDAAyD,CAAC;AAC5E,yEAAyE;AACzE,+EAA+E;AAC/E,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AACrD,MAAM,gBAAgB,GAAG,mDAAmD,CAAC;AAC7E,MAAM,kBAAkB,GAAG,gCAAgC,CAAC;AAC5D,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AACvD,iFAAiF;AACjF,+EAA+E;AAC/E,+EAA+E;AAC/E,mEAAmE;AACnE,MAAM,kBAAkB,GAAG,iDAAiD,CAAC;AAC7E,6EAA6E;AAC7E,+DAA+D;AAC/D,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AAC5D,MAAM,wBAAwB,GAAG,+CAA+C,CAAC;AACjF,gFAAgF;AAChF,6EAA6E;AAC7E,uEAAuE;AACvE,6EAA6E;AAC7E,gFAAgF;AAChF,gFAAgF;AAChF,MAAM,uBAAuB,GAC3B,oEAAoE,CAAC;AAEvE,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,MAAM,kBAAkB,GAAa;IACnC,EAAE,EAAE,eAAe;IACnB,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EAAE,gDAAgD;IAC7D,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,qEAAqE;CAC/E,CAAC;AACF,MAAM,mBAAmB,GAAa;IACpC,EAAE,EAAE,gBAAgB;IACpB,KAAK,EAAE,8BAA8B;IACrC,WAAW,EAAE,0CAA0C;IACvD,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,wGAAwG;CAC3G,CAAC;AACF,MAAM,gBAAgB,GAAa;IACjC,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,kBAAkB;IACzB,WAAW,EAAE,mCAAmC;IAChD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,gEAAgE;IACzE,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,aAAa,GAAa;IAC9B,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EAAE,4CAA4C;IACzD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,0DAA0D;IACnE,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,YAAY,GAAa;IAC7B,EAAE,EAAE,SAAS;IACb,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,0CAA0C;IACvD,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,2GAA2G;CAC9G,CAAC;AACF,MAAM,cAAc,GAAa;IAC/B,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EAAE,kCAAkC;IAC/C,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,QAAQ;IACnB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,kGAAkG;CACrG,CAAC;AACF,MAAM,eAAe,GAAa;IAChC,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,mCAAmC;IAChD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,gEAAgE;CAC1E,CAAC;AACF,MAAM,WAAW,GAAa;IAC5B,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,kBAAkB;IACzB,WAAW,EAAE,6CAA6C;IAC1D,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,uEAAuE;IAChF,WAAW,EAAE,qDAAqD;CACnE,CAAC;AACF,MAAM,mBAAmB,GAAa;IACpC,EAAE,EAAE,gBAAgB;IACpB,KAAK,EAAE,8BAA8B;IACrC,WAAW,EAAE,wBAAwB;IACrC,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,gHAAgH;CACnH,CAAC;AACF,MAAM,kBAAkB,GAAa;IACnC,EAAE,EAAE,eAAe;IACnB,KAAK,EAAE,+BAA+B;IACtC,WAAW,EAAE,uCAAuC;IACpD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,oFAAoF;IAC7F,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,oBAAoB,GAAa;IACrC,EAAE,EAAE,iBAAiB;IACrB,KAAK,EAAE,iCAAiC;IACxC,WAAW,EAAE,kCAAkC;IAC/C,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,sFAAsF;IAC/F,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,sBAAsB,GAAa;IACvC,EAAE,EAAE,mBAAmB;IACvB,KAAK,EAAE,mCAAmC;IAC1C,WAAW,EAAE,uBAAuB;IACpC,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,sFAAsF;CAChG,CAAC;AACF,MAAM,oBAAoB,GAAa;IACrC,EAAE,EAAE,iBAAiB;IACrB,KAAK,EAAE,+CAA+C;IACtD,WAAW,EAAE,0DAA0D;IACvE,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,wHAAwH;CAC3H,CAAC;AACF,MAAM,uBAAuB,GAAa;IACxC,EAAE,EAAE,6BAA6B;IACjC,KAAK,EAAE,0CAA0C;IACjD,WAAW,EAAE,4CAA4C;IACzD,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,mBAAmB;IACxB,OAAO,EAAE,iFAAiF;IAC1F,WAAW,EAAE,+DAA+D;CAC7E,CAAC;AACF,MAAM,0BAA0B,GAAa;IAC3C,EAAE,EAAE,uBAAuB;IAC3B,KAAK,EAAE,8BAA8B;IACrC,WAAW,EAAE,wDAAwD;IACrE,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,MAAM;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,6FAA6F;IAC/F,WAAW,EAAE,sEAAsE;CACpF,CAAC;AACF,MAAM,yBAAyB,GAAa;IAC1C,EAAE,EAAE,sBAAsB;IAC1B,KAAK,EAAE,uCAAuC;IAC9C,WAAW,EAAE,mEAAmE;IAChF,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,SAAS,EAAE,+DAA+D;IACrF,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,gHAAgH;IAClH,WAAW,EAAE,2DAA2D;CACzE,CAAC;AAEF,+EAA+E;AAC/E,kFAAkF;AAClF,+EAA+E;AAC/E,iFAAiF;AACjF,yEAAyE;AACzE,MAAM,gBAAgB,GACpB,gSAAgS,CAAC;AACnS,MAAM,kBAAkB,GAAa;IACnC,EAAE,EAAE,eAAe;IACnB,KAAK,EAAE,4CAA4C;IACnD,WAAW,EAAE,0EAA0E;IACvF,QAAQ,EAAE,aAAa;IACvB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,+HAA+H;IACjI,WAAW,EACT,2FAA2F;CAC9F,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,UAAU,GAAa;IAClC,EAAE,EAAE,WAAW;IACf,WAAW,EAAE,2EAA2E;IACxF,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE;QACL,kBAAkB;QAClB,mBAAmB;QACnB,gBAAgB;QAChB,aAAa;QACb,YAAY;QACZ,cAAc;QACd,eAAe;QACf,WAAW;QACX,mBAAmB;QACnB,kBAAkB;QAClB,oBAAoB;QACpB,sBAAsB;QACtB,oBAAoB;QACpB,uBAAuB;QACvB,0BAA0B;QAC1B,yBAAyB;QACzB,kBAAkB;KACnB;IACD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC;IAChD,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,IAAc,EAAE,EAAE,CACzC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3B,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CACnF,CACF,CAAC;QAEJ,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAC1C,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QAC5C,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACtC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAChC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9B,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAClC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QACpC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5B,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QAC5C,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAC1C,GAAG,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QAC9C,GAAG,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;QAClD,GAAG,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QAC9C,GAAG,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACpD,GAAG,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAAC;QAC1D,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAE1C,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,mCAAmC;QACnC,SAAS,CAAC,uBAAuB,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YAChD,MAAM,SAAS,GAAyB,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YACzF,QAAQ,CAAC,IAAI,CACX,eAAe,CACb,yBAAyB,EACzB,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAC3D,EAAE,SAAS,EAAE,CACd,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC","sourcesContent":["/**\n * Source-code detector for classical, non-quantum-safe asymmetric cryptography\n * in Go. Same lexical (regex-over-source) strategy as the JS/TS and Python\n * detectors. Go's crypto lives almost entirely in the highly-standardized\n * `crypto/*` standard library, so package-qualified calls (`rsa.GenerateKey`,\n * `ecdsa.SignASN1`, `ecdh.X25519`, …) are precise, low-false-positive signals.\n *\n * Covered:\n *   - crypto/rsa   — GenerateKey, EncryptOAEP/PKCS1v15, SignPKCS1v15/PSS, DecryptOAEP, VerifyPKCS1v15/PSS\n *   - crypto/ecdsa — GenerateKey, Sign/SignASN1, Verify/VerifyASN1\n *   - crypto/ecdh  — P256/P384/P521/X25519 curve construction (key agreement)\n *   - crypto/elliptic — GenerateKey / ScalarMult (classic pre-1.20 ECDH)\n *   - crypto/ed25519 — GenerateKey, Sign, Verify\n *   - crypto/dsa   — GenerateKey, GenerateParameters (deprecated)\n *   - crypto/tls   — InsecureSkipVerify, legacy MinVersion (transport config hygiene)\n *\n * HNDL policy mirrors the other detectors: KEM / key agreement (RSA encryption,\n * ECDH) is harvest-now-decrypt-later exposed (hndl:true); signatures (RSA-sign,\n * ECDSA, Ed25519, DSA) are hndl:false but still forgeable by a quantum attacker.\n * Unlike Node's ambiguous `'ec'` keygen, Go's `ecdsa.GenerateKey` is\n * signature-specific and Go's key agreement lives in the separate `crypto/ecdh`\n * package, so the two are classified precisely rather than conservatively merged.\n */\nimport type { Detector, Finding, RuleMeta } from \"../types.js\";\nimport { GO_EXTENSIONS, eachMatch, findingFromRule, hasExtension } from \"../detect-utils.js\";\nimport { CWE_BROKEN_CRYPTO, CWE_CERT_VALIDATION, CWE_WEAK_STRENGTH } from \"../cwe.js\";\n\n/* -------------------------------------------------------------------------- */\n/* Precompiled regexes (module scope)                                         */\n/* -------------------------------------------------------------------------- */\n\nconst RE_GO_RSA_KEYGEN = /\\brsa\\.GenerateKey\\s*\\(|\\brsa\\.GenerateMultiPrimeKey\\s*\\(/g;\nconst RE_GO_RSA_ENCRYPT = /\\brsa\\.EncryptOAEP\\s*\\(|\\brsa\\.EncryptPKCS1v15\\s*\\(/g;\nconst RE_GO_RSA_SIGN = /\\brsa\\.SignPKCS1v15\\s*\\(|\\brsa\\.SignPSS\\s*\\(/g;\nconst RE_GO_ECDSA = /\\becdsa\\.GenerateKey\\s*\\(|\\becdsa\\.SignASN1\\s*\\(|\\becdsa\\.Sign\\s*\\(/g;\nconst RE_GO_ECDH = /\\becdh\\.(?:P256|P384|P521)\\s*\\(/g;\n// X25519 gets its own family (algorithm \"X25519\", lower severity) to match how\n// every other pack classifies it — Go was the lone site reporting it as ECDH/high\n// (audit F9). Still key-exchange + hndl:true.\nconst RE_GO_X25519 = /\\becdh\\.X25519\\s*\\(/g;\nconst RE_GO_ED25519 = /\\bed25519\\.GenerateKey\\s*\\(|\\bed25519\\.Sign\\s*\\(/g;\nconst RE_GO_DSA = /\\bdsa\\.GenerateKey\\s*\\(|\\bdsa\\.GenerateParameters\\s*\\(/g;\n// Verify / decrypt call sites — the inverse operations the Sign/Encrypt/\n// GenerateKey rules above miss today (audit F4/F6). Deliberately disjoint from\n// those rules to avoid double-counting: DecryptOAEP≠EncryptOAEP, Verify*≠Sign*.\nconst RE_GO_RSA_DECRYPT = /\\brsa\\.DecryptOAEP\\s*\\(/g;\nconst RE_GO_RSA_VERIFY = /\\brsa\\.VerifyPKCS1v15\\s*\\(|\\brsa\\.VerifyPSS\\s*\\(/g;\nconst RE_GO_ECDSA_VERIFY = /\\becdsa\\.Verify(?:ASN1)?\\s*\\(/g;\nconst RE_GO_ED25519_VERIFY = /\\bed25519\\.Verify\\s*\\(/g;\n// Classic pre-1.20 elliptic-curve key agreement (crypto/elliptic), superseded by\n// crypto/ecdh but still widespread. GenerateKey + ScalarMult are the low-level\n// ECDH building blocks the crypto/ecdh rule does not see. `.ScalarMult(` is an\n// unqualified method call, so this rule carries medium confidence.\nconst RE_GO_ECDH_CLASSIC = /\\belliptic\\.GenerateKey\\s*\\(|\\.ScalarMult\\s*\\(/g;\n// Go TLS misconfiguration (crypto/tls). Mirrors the JS tlsDetector: disabled\n// certificate verification and a legacy TLS/SSL version floor.\nconst RE_GO_TLS_SKIP_VERIFY = /InsecureSkipVerify:\\s*true/g;\nconst RE_GO_TLS_LEGACY_VERSION = /MinVersion:\\s*tls\\.Version(?:TLS1[01]|SSL30)/g;\n// Identifier-form golang-jwt signing methods (audit gap: the quoted \"RS256\" alg\n// token is caught by the language-agnostic jwt-jose detector, but golang-jwt\n// passes the alg as an EXPORTED IDENTIFIER — `jwt.SigningMethodRS256`,\n// `jwt.SigningMethodES256`, `jwt.SigningMethodEdDSA` — which the string rule\n// misses. RS*/PS* → RSA, ES* → ECDSA, EdDSA → EdDSA. The `\\b`s keep it precise:\n// HS* HMAC methods and longer look-alikes (`SigningMethodRS2560`) do not match.\nconst RE_GO_JWT_SIGNINGMETHOD =\n  /\\bSigningMethod(RS|PS|ES)(?:256|384|512)\\b|\\bSigningMethodEdDSA\\b/g;\n\n/* -------------------------------------------------------------------------- */\n/* Rule catalog                                                               */\n/* -------------------------------------------------------------------------- */\n\nconst RULE_GO_RSA_KEYGEN: RuleMeta = {\n  id: \"go-rsa-keygen\",\n  title: \"Go RSA key generation\",\n  description: \"crypto/rsa GenerateKey / GenerateMultiPrimeKey\",\n  category: \"kem\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"RSA\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Generates a classical RSA key pair (Go), which is not quantum-safe.\",\n};\nconst RULE_GO_RSA_ENCRYPT: RuleMeta = {\n  id: \"go-rsa-encrypt\",\n  title: \"Go RSA public-key encryption\",\n  description: \"crypto/rsa EncryptOAEP / EncryptPKCS1v15\",\n  category: \"kem\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"RSA\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"RSA public-key encryption (Go) is broken by Shor's algorithm and exposed to harvest-now-decrypt-later.\",\n};\nconst RULE_GO_RSA_SIGN: RuleMeta = {\n  id: \"go-rsa-sign\",\n  title: \"Go RSA signature\",\n  description: \"crypto/rsa SignPKCS1v15 / SignPSS\",\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"RSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Classical RSA signing (Go) is forgeable by a quantum attacker.\",\n  remediation: \"ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205)\",\n};\nconst RULE_GO_ECDSA: RuleMeta = {\n  id: \"go-ecdsa\",\n  title: \"Go ECDSA key/signature\",\n  description: \"crypto/ecdsa GenerateKey / Sign / SignASN1\",\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"ECDSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Classical ECDSA (Go) is forgeable by a quantum attacker.\",\n  remediation: \"ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205)\",\n};\nconst RULE_GO_ECDH: RuleMeta = {\n  id: \"go-ecdh\",\n  title: \"Go ECDH key exchange\",\n  description: \"crypto/ecdh P256/P384/P521 key agreement\",\n  category: \"key-exchange\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"ECDH\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"Elliptic-curve Diffie-Hellman (Go crypto/ecdh) is broken by Shor's algorithm (harvest-now-decrypt-later).\",\n};\nconst RULE_GO_X25519: RuleMeta = {\n  id: \"go-x25519\",\n  title: \"Go X25519 key exchange\",\n  description: \"crypto/ecdh X25519 key agreement\",\n  category: \"key-exchange\",\n  severity: \"medium\",\n  confidence: \"high\",\n  algorithm: \"X25519\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"X25519 (Go crypto/ecdh) is modern but still classical key agreement — harvest-now-decrypt-later.\",\n};\nconst RULE_GO_ED25519: RuleMeta = {\n  id: \"go-ed25519\",\n  title: \"Go Ed25519 signature\",\n  description: \"crypto/ed25519 GenerateKey / Sign\",\n  category: \"signature\",\n  severity: \"low\",\n  confidence: \"high\",\n  algorithm: \"EdDSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Ed25519 (Go) is a modern but still classical signature scheme.\",\n};\nconst RULE_GO_DSA: RuleMeta = {\n  id: \"go-dsa\",\n  title: \"Go DSA key/usage\",\n  description: \"crypto/dsa GenerateKey / GenerateParameters\",\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"DSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Classical DSA (Go) is deprecated and forgeable by a quantum attacker.\",\n  remediation: \"Rotate off DSA and migrate to ML-DSA-65 (FIPS 204).\",\n};\nconst RULE_GO_RSA_DECRYPT: RuleMeta = {\n  id: \"go-rsa-decrypt\",\n  title: \"Go RSA public-key decryption\",\n  description: \"crypto/rsa DecryptOAEP\",\n  category: \"kem\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"RSA\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"RSA public-key decryption (Go) recovers data protected by a classical KEM — harvest-now-decrypt-later exposed.\",\n};\nconst RULE_GO_RSA_VERIFY: RuleMeta = {\n  id: \"go-rsa-verify\",\n  title: \"Go RSA signature verification\",\n  description: \"crypto/rsa VerifyPKCS1v15 / VerifyPSS\",\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"RSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Verifies classical RSA signatures (Go), which are forgeable by a quantum attacker.\",\n  remediation: \"ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205)\",\n};\nconst RULE_GO_ECDSA_VERIFY: RuleMeta = {\n  id: \"go-ecdsa-verify\",\n  title: \"Go ECDSA signature verification\",\n  description: \"crypto/ecdsa Verify / VerifyASN1\",\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"ECDSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Verifies classical ECDSA signatures (Go), which are forgeable by a quantum attacker.\",\n  remediation: \"ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205)\",\n};\nconst RULE_GO_ED25519_VERIFY: RuleMeta = {\n  id: \"go-ed25519-verify\",\n  title: \"Go Ed25519 signature verification\",\n  description: \"crypto/ed25519 Verify\",\n  category: \"signature\",\n  severity: \"low\",\n  confidence: \"high\",\n  algorithm: \"EdDSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Verifies Ed25519 signatures (Go) — modern but still classical and quantum-forgeable.\",\n};\nconst RULE_GO_ECDH_CLASSIC: RuleMeta = {\n  id: \"go-ecdh-classic\",\n  title: \"Go classic EC key agreement (crypto/elliptic)\",\n  description: \"crypto/elliptic GenerateKey / ScalarMult (pre-1.20 ECDH)\",\n  category: \"key-exchange\",\n  severity: \"high\",\n  confidence: \"medium\",\n  algorithm: \"ECDH\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"Low-level elliptic-curve key agreement (Go crypto/elliptic) is broken by Shor's algorithm (harvest-now-decrypt-later).\",\n};\nconst RULE_GO_TLS_SKIP_VERIFY: RuleMeta = {\n  id: \"go-tls-insecure-skip-verify\",\n  title: \"Go TLS certificate verification disabled\",\n  description: \"crypto/tls Config InsecureSkipVerify: true\",\n  category: \"tls\",\n  severity: \"high\",\n  confidence: \"high\",\n  hndl: false,\n  cwe: CWE_CERT_VALIDATION,\n  message: \"InsecureSkipVerify:true disables TLS certificate verification (Go) — MITM risk.\",\n  remediation: \"Remove InsecureSkipVerify:true; verify certificates properly.\",\n};\nconst RULE_GO_TLS_LEGACY_VERSION: RuleMeta = {\n  id: \"go-tls-legacy-version\",\n  title: \"Go legacy TLS version pinned\",\n  description: \"crypto/tls MinVersion pinned to TLS 1.0/1.1 or SSL 3.0\",\n  category: \"tls\",\n  severity: \"medium\",\n  confidence: \"high\",\n  hndl: false,\n  cwe: CWE_WEAK_STRENGTH,\n  message:\n    \"MinVersion pins a deprecated TLS/SSL floor (TLS 1.0/1.1 or SSL 3.0) in Go; require TLS 1.3.\",\n  remediation: \"Set MinVersion: tls.VersionTLS13 and prefer PQC-hybrid key exchange.\",\n};\nconst RULE_GO_JWT_SIGNINGMETHOD: RuleMeta = {\n  id: \"go-jwt-signingmethod\",\n  title: \"Go identifier-form JWT signing method\",\n  description: \"golang-jwt SigningMethodRS/PS/ES* / SigningMethodEdDSA identifier\",\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"unknown\", // representative umbrella; refined per-match (RSA/ECDSA/EdDSA)\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"A classical JWT signature algorithm (Go golang-jwt, identifier form) is used, forgeable by a quantum attacker.\",\n  remediation: \"ML-DSA-65 (FIPS 204); track IETF PQC JOSE/COSE algorithms\",\n};\n\n// The x509 PEM/DER key + certificate layer: parsing/marshalling classical RSA,\n// EC and PKIX key material and X.509 certificates. This is the \"handles classical\n// keys\" surface the Sign/Verify/GenerateKey rules miss — a key-loading utility\n// (`x509.ParsePKCS8PrivateKey`) touches quantum-vulnerable material without ever\n// naming rsa/ecdsa. Family is ambiguous at the parse site, so `unknown`.\nconst RE_GO_X509_PARSE =\n  /\\bx509\\.(?:ParsePKCS1PrivateKey|ParsePKCS8PrivateKey|ParsePKIXPublicKey|ParseECPrivateKey|ParsePKCS1PublicKey|MarshalPKCS1PrivateKey|MarshalPKCS8PrivateKey|MarshalPKIXPublicKey|MarshalECPrivateKey|ParseCertificates?|ParseCertificateRequest|CreateCertificate|CreateCertificateRequest)\\b/g;\nconst RULE_GO_X509_PARSE: RuleMeta = {\n  id: \"go-x509-parse\",\n  title: \"Go x509 classical key/certificate handling\",\n  description: \"x509.Parse*/Marshal*/Create* for RSA/EC/PKIX keys and X.509 certificates\",\n  category: \"certificate\",\n  severity: \"medium\",\n  confidence: \"medium\",\n  algorithm: \"unknown\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"This code parses/marshals classical asymmetric key or X.509 certificate material (x509.*), a quantum forgery/harvest surface.\",\n  remediation:\n    \"Inventory the key/cert types handled here; plan PQC (ML-DSA) certificate + key migration.\",\n};\n\n/** Detects classical asymmetric crypto in Go source (crypto/* standard library). */\nexport const goDetector: Detector = {\n  id: \"go-crypto\",\n  description: \"Classical asymmetric crypto in Go (crypto/rsa, ecdsa, ecdh, ed25519, dsa)\",\n  scope: \"source\",\n  language: \"go\",\n  rules: [\n    RULE_GO_RSA_KEYGEN,\n    RULE_GO_RSA_ENCRYPT,\n    RULE_GO_RSA_SIGN,\n    RULE_GO_ECDSA,\n    RULE_GO_ECDH,\n    RULE_GO_X25519,\n    RULE_GO_ED25519,\n    RULE_GO_DSA,\n    RULE_GO_RSA_DECRYPT,\n    RULE_GO_RSA_VERIFY,\n    RULE_GO_ECDSA_VERIFY,\n    RULE_GO_ED25519_VERIFY,\n    RULE_GO_ECDH_CLASSIC,\n    RULE_GO_TLS_SKIP_VERIFY,\n    RULE_GO_TLS_LEGACY_VERSION,\n    RULE_GO_JWT_SIGNINGMETHOD,\n    RULE_GO_X509_PARSE,\n  ],\n  appliesTo: (f) => hasExtension(f, GO_EXTENSIONS),\n  detect({ file, content }): Finding[] {\n    const findings: Finding[] = [];\n    const add = (re: RegExp, rule: RuleMeta) =>\n      eachMatch(re, content, (m) =>\n        findings.push(\n          findingFromRule(rule, { file, content, index: m.index, matchLength: m[0].length }),\n        ),\n      );\n\n    add(RE_GO_RSA_KEYGEN, RULE_GO_RSA_KEYGEN);\n    add(RE_GO_RSA_ENCRYPT, RULE_GO_RSA_ENCRYPT);\n    add(RE_GO_RSA_SIGN, RULE_GO_RSA_SIGN);\n    add(RE_GO_ECDSA, RULE_GO_ECDSA);\n    add(RE_GO_ECDH, RULE_GO_ECDH);\n    add(RE_GO_X25519, RULE_GO_X25519);\n    add(RE_GO_ED25519, RULE_GO_ED25519);\n    add(RE_GO_DSA, RULE_GO_DSA);\n    add(RE_GO_RSA_DECRYPT, RULE_GO_RSA_DECRYPT);\n    add(RE_GO_RSA_VERIFY, RULE_GO_RSA_VERIFY);\n    add(RE_GO_ECDSA_VERIFY, RULE_GO_ECDSA_VERIFY);\n    add(RE_GO_ED25519_VERIFY, RULE_GO_ED25519_VERIFY);\n    add(RE_GO_ECDH_CLASSIC, RULE_GO_ECDH_CLASSIC);\n    add(RE_GO_TLS_SKIP_VERIFY, RULE_GO_TLS_SKIP_VERIFY);\n    add(RE_GO_TLS_LEGACY_VERSION, RULE_GO_TLS_LEGACY_VERSION);\n    add(RE_GO_X509_PARSE, RULE_GO_X509_PARSE);\n\n    // Identifier-form golang-jwt signing methods (jwt.SigningMethodRS256, …).\n    // Refine the umbrella \"unknown\" algorithm per match: m[1] is the RS/PS/ES\n    // prefix (RS/PS → RSA, ES → ECDSA); when it is undefined the EdDSA branch\n    // matched, so the family is EdDSA.\n    eachMatch(RE_GO_JWT_SIGNINGMETHOD, content, (m) => {\n      const algorithm: Finding[\"algorithm\"] = m[1] === \"ES\" ? \"ECDSA\" : m[1] ? \"RSA\" : \"EdDSA\";\n      findings.push(\n        findingFromRule(\n          RULE_GO_JWT_SIGNINGMETHOD,\n          { file, content, index: m.index, matchLength: m[0].length },\n          { algorithm },\n        ),\n      );\n    });\n\n    return findings;\n  },\n};\n"]}

package/dist/detectors/java.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"java.d.ts","sourceRoot":"","sources":["../../src/detectors/java.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAC;AA8K/D,iFAAiF;AACjF,eAAO,MAAM,YAAY,EAAE,QAsC1B,CAAC"}
+{"version":3,"file":"java.d.ts","sourceRoot":"","sources":["../../src/detectors/java.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAC;AAkT/D,iFAAiF;AACjF,eAAO,MAAM,YAAY,EAAE,QA4F1B,CAAC"}

package/dist/detectors/java.js

@@ -1,5 +1,5 @@
 import { JAVA_EXTENSIONS, eachMatch, findingFromRule, hasExtension } from "../detect-utils.js";
-import { CWE_BROKEN_CRYPTO } from "../cwe.js";
+import { CWE_BROKEN_CRYPTO, CWE_CERT_VALIDATION, CWE_WEAK_STRENGTH } from "../cwe.js";
 /* -------------------------------------------------------------------------- */
 /* Regexes                                                                    */
 /* -------------------------------------------------------------------------- */
@@ -8,7 +8,29 @@ import { CWE_BROKEN_CRYPTO } from "../cwe.js";
 // are symmetric / hashing only).
 const RE_JAVA_GETINSTANCE = /\b(KeyPairGenerator|Signature|Cipher|KeyAgreement|KeyFactory)\s*\.\s*getInstance\s*\(\s*"([^"]+)"/g;
 // BouncyCastle lightweight-API class instantiations.
-const RE_JAVA_BC = /\bnew\s+(RSAKeyPairGenerator|DSAKeyPairGenerator|ECKeyPairGenerator|ECDSASigner|Ed25519Signer|Ed448Signer|X25519Agreement|X448Agreement)\s*\(/g;
+const RE_JAVA_BC = /\bnew\s+(RSAKeyPairGenerator|DSAKeyPairGenerator|ECKeyPairGenerator|ECDSASigner|Ed25519Signer|Ed448Signer|X25519Agreement|X448Agreement|ECDHBasicAgreement|DHBasicAgreement|X25519KeyPairGenerator|Ed25519KeyPairGenerator|RSAEngine|OAEPEncoding)\s*\(/g;
+// BouncyCastle lightweight-API curve/EdDSA classes as a BARE constructor call —
+// the Kotlin form (`X448KeyPairGenerator()`, no `new` keyword). RE_JAVA_BC above
+// only matches the Java `new <Class>(` form, so Kotlin sources that drive the
+// lightweight API directly are missed. The negative lookbehind `(?<!\bnew\s+)`
+// keeps this additive: `new X448Agreement(` stays with RE_JAVA_BC (java-xdh),
+// while bare `X448Agreement(` routes to the family-specific rules below. Scoped
+// to the exact X448/X25519/Ed448/Ed25519 class names to stay precise.
+const RE_JAVA_BC_CURVE = /(?<!\bnew\s+)\b(X448KeyPairGenerator|X448Agreement|X448PrivateKeyParameters|X25519KeyPairGenerator|X25519Agreement|Ed448KeyPairGenerator|Ed448Signer|Ed25519KeyPairGenerator|Ed25519Signer)\s*\(/g;
+// Insecure JSSE / TLS configuration expressed in Java source. Mirrors the JS
+// tlsDetector in source.ts (category "tls"): a legacy SSL/TLS protocol version
+// requested from SSLContext, and TLS hostname verification neutered via an
+// all-trusting verifier (Apache HttpClient's NoopHostnameVerifier /
+// ALLOW_ALL_HOSTNAME_VERIFIER).
+const RE_JAVA_TLS_LEGACY = /\bSSLContext\s*\.\s*getInstance\s*\(\s*"(SSL|SSLv3|TLSv1)"/g;
+const RE_JAVA_TLS_NOVERIFY = /\b(NoopHostnameVerifier|ALLOW_ALL_HOSTNAME_VERIFIER)\b/g;
+// Identifier-form JWT/JOSE signature algorithms (audit F7). The quoted-string
+// alg token ("RS256") is caught by the language-agnostic jwt-jose detector, but
+// the Java JWT libraries pass the alg as an IDENTIFIER, not a string literal:
+// jjwt's `SignatureAlgorithm.RS256` and auth0 java-jwt's `Algorithm.RSA256` /
+// `Algorithm.ECDSA256`. ("SignatureAlgorithm" has no word boundary before its
+// "Algorithm", so the auth0 branch cannot re-match the jjwt form.)
+const RE_JAVA_JWT_ALG = /\bSignatureAlgorithm\.(?:RS|PS|ES)(?:256|384|512)\b|\bAlgorithm\.(?:RSA|ECDSA)(?:256|384|512)\b/g;
 /* -------------------------------------------------------------------------- */
 /* Rule catalog                                                               */
 /* -------------------------------------------------------------------------- */
@@ -105,7 +127,7 @@ const RULE_JAVA_XDH = {
     title: "Java X25519/X448 key agreement",
     description: "JCA XDH / X25519 / X448 (KeyPairGenerator / KeyAgreement)",
     category: "key-exchange",
-    severity: "low",
+    severity: "medium",
     confidence: "high",
     algorithm: "X25519",
     hndl: true,
@@ -124,6 +146,82 @@ const RULE_JAVA_EDDSA = {
     cwe: CWE_BROKEN_CRYPTO,
     message: "Ed25519/Ed448 (Java/JCA) is a modern but still classical signature scheme.",
 };
+// BouncyCastle lightweight-API rules for bare (Kotlin-form) constructor calls.
+// Split by family so X448 and X25519 report their own algorithm string (java-xdh
+// lumps both under "X25519"). Severity/CWE copied from the JCA siblings above.
+const RULE_JAVA_BC_X448 = {
+    id: "java-bc-x448",
+    title: "Java/Kotlin X448 key agreement (BouncyCastle lightweight API)",
+    description: "BouncyCastle X448KeyPairGenerator / X448Agreement / X448PrivateKeyParameters",
+    category: "key-exchange",
+    severity: "medium",
+    confidence: "high",
+    algorithm: "X448",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "X448 (Java/Kotlin, BouncyCastle lightweight API) is modern but still classical key agreement — harvest-now-decrypt-later.",
+};
+const RULE_JAVA_BC_X25519 = {
+    id: "java-bc-x25519",
+    title: "Java/Kotlin X25519 key agreement (BouncyCastle lightweight API)",
+    description: "BouncyCastle X25519KeyPairGenerator / X25519Agreement",
+    category: "key-exchange",
+    severity: "medium",
+    confidence: "high",
+    algorithm: "X25519",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "X25519 (Java/Kotlin, BouncyCastle lightweight API) is modern but still classical key agreement — harvest-now-decrypt-later.",
+};
+const RULE_JAVA_BC_EDDSA = {
+    id: "java-bc-eddsa",
+    title: "Java/Kotlin Ed25519/Ed448 signature (BouncyCastle lightweight API)",
+    description: "BouncyCastle Ed448KeyPairGenerator / Ed448Signer / Ed25519KeyPairGenerator / Ed25519Signer",
+    category: "signature",
+    severity: "low",
+    confidence: "high",
+    algorithm: "EdDSA",
+    hndl: false,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "Ed25519/Ed448 (Java/Kotlin, BouncyCastle lightweight API) is a modern but still classical signature scheme.",
+};
+const RULE_JAVA_TLS_LEGACY = {
+    id: "java-tls-legacy-version",
+    title: "Legacy SSL/TLS version requested",
+    description: 'SSLContext.getInstance("SSL" | "SSLv3" | "TLSv1")',
+    category: "tls",
+    severity: "medium",
+    confidence: "high",
+    hndl: false,
+    cwe: CWE_WEAK_STRENGTH,
+    message: "SSL/SSLv3/TLS 1.0 are deprecated and insecure (Java/JSSE); require TLS 1.3.",
+    remediation: 'Use SSLContext.getInstance("TLSv1.3") and prefer PQC-hybrid key exchange.',
+};
+const RULE_JAVA_TLS_NOVERIFY = {
+    id: "java-tls-hostname-verification-disabled",
+    title: "TLS hostname verification disabled",
+    description: "NoopHostnameVerifier / ALLOW_ALL_HOSTNAME_VERIFIER",
+    category: "tls",
+    severity: "high",
+    confidence: "high",
+    hndl: false,
+    cwe: CWE_CERT_VALIDATION,
+    message: "An all-trusting hostname verifier (Java) disables TLS hostname checking (MITM risk).",
+    remediation: "Remove the all-trusting verifier; rely on the default hostname verifier.",
+};
+const RULE_JAVA_JWT_ALG = {
+    id: "java-jwt-alg",
+    title: "Java identifier-form JWT/JOSE algorithm",
+    description: "jjwt SignatureAlgorithm.RS/PS/ES* / auth0 Algorithm.RSA*/ECDSA*",
+    category: "signature",
+    severity: "high",
+    confidence: "high",
+    algorithm: "unknown",
+    hndl: false,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "A classical JWT/JOSE signature algorithm (Java, identifier form) is used, forgeable by a quantum attacker.",
+    remediation: "ML-DSA-65 (FIPS 204); track IETF PQC JOSE/COSE algorithms",
+};
 /**
  * Classify a `<factory>.getInstance("<alg>")` pair into a rule, or null when the
  * algorithm is not classical asymmetric crypto (AES, HMAC, PBKDF2, hashes, …).
@@ -143,6 +241,12 @@ function classifyGetInstance(factory, rawAlg) {
         return RULE_JAVA_EDDSA;
     if (alg.includes("X25519") || alg.includes("X448") || alg === "XDH")
         return RULE_JAVA_XDH;
+    // RSASSA-PSS is an RSA *signature* scheme, not encryption/KEM. The string
+    // contains "RSA", so it must be caught here — BEFORE the generic RSA branch
+    // below, which would otherwise (mis)classify it as HNDL-exposed RSA
+    // encryption (java-rsa / hndl:true). Signatures are hndl:false. (Fixes F8.)
+    if (alg.includes("PSS"))
+        return RULE_JAVA_RSA_SIGN;
     if (alg.includes("RSA"))
         return isSignature ? RULE_JAVA_RSA_SIGN : RULE_JAVA_RSA;
     if (alg.includes("DSA"))
@@ -161,6 +265,24 @@ const BC_CLASS_RULES = {
     Ed448Signer: RULE_JAVA_EDDSA,
     X25519Agreement: RULE_JAVA_XDH,
     X448Agreement: RULE_JAVA_XDH,
+    ECDHBasicAgreement: RULE_JAVA_ECDH,
+    DHBasicAgreement: RULE_JAVA_DH,
+    X25519KeyPairGenerator: RULE_JAVA_XDH,
+    Ed25519KeyPairGenerator: RULE_JAVA_EDDSA,
+    RSAEngine: RULE_JAVA_RSA,
+    OAEPEncoding: RULE_JAVA_RSA,
+};
+/** BouncyCastle lightweight-API bare-constructor class name → family rule. */
+const BC_CURVE_CLASS_RULES = {
+    X448KeyPairGenerator: RULE_JAVA_BC_X448,
+    X448Agreement: RULE_JAVA_BC_X448,
+    X448PrivateKeyParameters: RULE_JAVA_BC_X448,
+    X25519KeyPairGenerator: RULE_JAVA_BC_X25519,
+    X25519Agreement: RULE_JAVA_BC_X25519,
+    Ed448KeyPairGenerator: RULE_JAVA_BC_EDDSA,
+    Ed448Signer: RULE_JAVA_BC_EDDSA,
+    Ed25519KeyPairGenerator: RULE_JAVA_BC_EDDSA,
+    Ed25519Signer: RULE_JAVA_BC_EDDSA,
 };
 /** Detects classical asymmetric crypto in Java / Kotlin (JCA + BouncyCastle). */
 export const javaDetector = {
@@ -178,6 +300,12 @@ export const javaDetector = {
         RULE_JAVA_DH,
         RULE_JAVA_XDH,
         RULE_JAVA_EDDSA,
+        RULE_JAVA_BC_X448,
+        RULE_JAVA_BC_X25519,
+        RULE_JAVA_BC_EDDSA,
+        RULE_JAVA_TLS_LEGACY,
+        RULE_JAVA_TLS_NOVERIFY,
+        RULE_JAVA_JWT_ALG,
     ],
     appliesTo: (f) => hasExtension(f, JAVA_EXTENSIONS),
     detect({ file, content }) {
@@ -194,6 +322,43 @@ export const javaDetector = {
                 return;
             findings.push(findingFromRule(rule, { file, content, index: m.index, matchLength: m[0].length }));
         });
+        // BouncyCastle lightweight-API classes as a bare constructor call (Kotlin
+        // form, no `new`). RE_JAVA_BC_CURVE's negative lookbehind excludes the
+        // `new <Class>(` form already handled above, so this only adds the missed
+        // 448/25519 Kotlin-style matches — no double-counting.
+        eachMatch(RE_JAVA_BC_CURVE, content, (m) => {
+            const rule = BC_CURVE_CLASS_RULES[m[1]];
+            if (!rule)
+                return;
+            findings.push(findingFromRule(rule, { file, content, index: m.index, matchLength: m[0].length }));
+        });
+        // Legacy SSL/TLS protocol version requested from SSLContext.
+        eachMatch(RE_JAVA_TLS_LEGACY, content, (m) => {
+            findings.push(findingFromRule(RULE_JAVA_TLS_LEGACY, {
+                file,
+                content,
+                index: m.index,
+                matchLength: m[0].length,
+            }));
+        });
+        // All-trusting hostname verifier — disables TLS hostname verification.
+        eachMatch(RE_JAVA_TLS_NOVERIFY, content, (m) => {
+            findings.push(findingFromRule(RULE_JAVA_TLS_NOVERIFY, {
+                file,
+                content,
+                index: m.index,
+                matchLength: m[0].length,
+            }));
+        });
+        // Identifier-form JWT/JOSE signature algorithms (jjwt / auth0).
+        eachMatch(RE_JAVA_JWT_ALG, content, (m) => {
+            findings.push(findingFromRule(RULE_JAVA_JWT_ALG, {
+                file,
+                content,
+                index: m.index,
+                matchLength: m[0].length,
+            }));
+        });
         return findings;
     },
 };

package/dist/detectors/java.js.map

@@ -1 +1 @@
-{"version":3,"file":"java.js","sourceRoot":"","sources":["../../src/detectors/java.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,8EAA8E;AAC9E,8EAA8E;AAC9E,iCAAiC;AACjC,MAAM,mBAAmB,GACvB,oGAAoG,CAAC;AAEvG,qDAAqD;AACrD,MAAM,UAAU,GACd,gJAAgJ,CAAC;AAEnJ,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,MAAM,aAAa,GAAa;IAC9B,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,yBAAyB;IAChC,WAAW,EAAE,gDAAgD;IAC7D,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,kFAAkF;CAC5F,CAAC;AACF,MAAM,kBAAkB,GAAa;IACnC,EAAE,EAAE,eAAe;IACnB,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EAAE,uCAAuC;IACpD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,sEAAsE;IAC/E,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,mBAAmB,GAAa;IACpC,EAAE,EAAE,gBAAgB;IACpB,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EAAE,wCAAwC;IACrD,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,8JAA8J;IAChK,WAAW,EACT,8FAA8F;CACjG,CAAC;AACF,MAAM,oBAAoB,GAAa;IACrC,EAAE,EAAE,iBAAiB;IACrB,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,yCAAyC;IACtD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,wEAAwE;IACjF,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,cAAc,GAAa;IAC/B,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,yBAAyB;IAChC,WAAW,EAAE,sCAAsC;IACnD,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,qGAAqG;CACxG,CAAC;AACF,MAAM,aAAa,GAAa;IAC9B,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EAAE,sCAAsC;IACnD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,6EAA6E;IACtF,WAAW,EAAE,qDAAqD;CACnE,CAAC;AACF,MAAM,YAAY,GAAa;IAC7B,EAAE,EAAE,SAAS;IACb,KAAK,EAAE,kCAAkC;IACzC,WAAW,EAAE,mDAAmD;IAChE,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,IAAI;IACf,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,mGAAmG;CACtG,CAAC;AACF,MAAM,aAAa,GAAa;IAC9B,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,gCAAgC;IACvC,WAAW,EAAE,2DAA2D;IACxE,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,QAAQ;IACnB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,iGAAiG;CACpG,CAAC;AACF,MAAM,eAAe,GAAa;IAChC,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,8BAA8B;IACrC,WAAW,EAAE,6BAA6B;IAC1C,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,4EAA4E;CACtF,CAAC;AAEF;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,OAAe,EAAE,MAAc;IAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,MAAM,WAAW,GAAG,OAAO,KAAK,WAAW,CAAC;IAE5C,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,oBAAoB,CAAC;IACvD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC;IAChD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAClF,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC3E,OAAO,eAAe,CAAC;IACzB,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,aAAa,CAAC;IAC1F,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC;IACjF,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,CAAC,8BAA8B;IAC7E,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,YAAY,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sDAAsD;AACtD,MAAM,cAAc,GAA6B;IAC/C,mBAAmB,EAAE,aAAa;IAClC,mBAAmB,EAAE,aAAa;IAClC,kBAAkB,EAAE,mBAAmB;IACvC,WAAW,EAAE,oBAAoB;IACjC,aAAa,EAAE,eAAe;IAC9B,WAAW,EAAE,eAAe;IAC5B,eAAe,EAAE,aAAa;IAC9B,aAAa,EAAE,aAAa;CAC7B,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,YAAY,GAAa;IACpC,EAAE,EAAE,aAAa;IACjB,WAAW,EAAE,6EAA6E;IAC1F,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE;QACL,aAAa;QACb,kBAAkB;QAClB,mBAAmB;QACnB,oBAAoB;QACpB,cAAc;QACd,aAAa;QACb,YAAY;QACZ,aAAa;QACb,eAAe;KAChB;IACD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,eAAe,CAAC;IAClD,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,SAAS,CAAC,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YAC5C,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,mDAAmD;YACtE,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CACnF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CACnF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}
+{"version":3,"file":"java.js","sourceRoot":"","sources":["../../src/detectors/java.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEtF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,8EAA8E;AAC9E,8EAA8E;AAC9E,iCAAiC;AACjC,MAAM,mBAAmB,GACvB,oGAAoG,CAAC;AAEvG,qDAAqD;AACrD,MAAM,UAAU,GACd,0PAA0P,CAAC;AAE7P,gFAAgF;AAChF,iFAAiF;AACjF,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,sEAAsE;AACtE,MAAM,gBAAgB,GACpB,mMAAmM,CAAC;AAEtM,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,oEAAoE;AACpE,gCAAgC;AAChC,MAAM,kBAAkB,GAAG,6DAA6D,CAAC;AACzF,MAAM,oBAAoB,GAAG,yDAAyD,CAAC;AAEvF,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,mEAAmE;AACnE,MAAM,eAAe,GACnB,kGAAkG,CAAC;AAErG,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,MAAM,aAAa,GAAa;IAC9B,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,yBAAyB;IAChC,WAAW,EAAE,gDAAgD;IAC7D,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,kFAAkF;CAC5F,CAAC;AACF,MAAM,kBAAkB,GAAa;IACnC,EAAE,EAAE,eAAe;IACnB,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EAAE,uCAAuC;IACpD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,sEAAsE;IAC/E,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,mBAAmB,GAAa;IACpC,EAAE,EAAE,gBAAgB;IACpB,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EAAE,wCAAwC;IACrD,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,8JAA8J;IAChK,WAAW,EACT,8FAA8F;CACjG,CAAC;AACF,MAAM,oBAAoB,GAAa;IACrC,EAAE,EAAE,iBAAiB;IACrB,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,yCAAyC;IACtD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,wEAAwE;IACjF,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,cAAc,GAAa;IAC/B,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,yBAAyB;IAChC,WAAW,EAAE,sCAAsC;IACnD,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,qGAAqG;CACxG,CAAC;AACF,MAAM,aAAa,GAAa;IAC9B,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EAAE,sCAAsC;IACnD,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,6EAA6E;IACtF,WAAW,EAAE,qDAAqD;CACnE,CAAC;AACF,MAAM,YAAY,GAAa;IAC7B,EAAE,EAAE,SAAS;IACb,KAAK,EAAE,kCAAkC;IACzC,WAAW,EAAE,mDAAmD;IAChE,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,IAAI;IACf,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,mGAAmG;CACtG,CAAC;AACF,MAAM,aAAa,GAAa;IAC9B,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,gCAAgC;IACvC,WAAW,EAAE,2DAA2D;IACxE,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,QAAQ;IACnB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,iGAAiG;CACpG,CAAC;AACF,MAAM,eAAe,GAAa;IAChC,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,8BAA8B;IACrC,WAAW,EAAE,6BAA6B;IAC1C,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,4EAA4E;CACtF,CAAC;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,+EAA+E;AAC/E,MAAM,iBAAiB,GAAa;IAClC,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,+DAA+D;IACtE,WAAW,EAAE,8EAA8E;IAC3F,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,2HAA2H;CAC9H,CAAC;AACF,MAAM,mBAAmB,GAAa;IACpC,EAAE,EAAE,gBAAgB;IACpB,KAAK,EAAE,iEAAiE;IACxE,WAAW,EAAE,uDAAuD;IACpE,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,QAAQ;IACnB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,6HAA6H;CAChI,CAAC;AACF,MAAM,kBAAkB,GAAa;IACnC,EAAE,EAAE,eAAe;IACnB,KAAK,EAAE,oEAAoE;IAC3E,WAAW,EACT,4FAA4F;IAC9F,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,6GAA6G;CAChH,CAAC;AACF,MAAM,oBAAoB,GAAa;IACrC,EAAE,EAAE,yBAAyB;IAC7B,KAAK,EAAE,kCAAkC;IACzC,WAAW,EAAE,mDAAmD;IAChE,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,MAAM;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,6EAA6E;IACtF,WAAW,EAAE,2EAA2E;CACzF,CAAC;AACF,MAAM,sBAAsB,GAAa;IACvC,EAAE,EAAE,yCAAyC;IAC7C,KAAK,EAAE,oCAAoC;IAC3C,WAAW,EAAE,oDAAoD;IACjE,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,mBAAmB;IACxB,OAAO,EAAE,sFAAsF;IAC/F,WAAW,EAAE,0EAA0E;CACxF,CAAC;AACF,MAAM,iBAAiB,GAAa;IAClC,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,yCAAyC;IAChD,WAAW,EAAE,iEAAiE;IAC9E,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,4GAA4G;IAC9G,WAAW,EAAE,2DAA2D;CACzE,CAAC;AAEF;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,OAAe,EAAE,MAAc;IAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,MAAM,WAAW,GAAG,OAAO,KAAK,WAAW,CAAC;IAE5C,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,oBAAoB,CAAC;IACvD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC;IAChD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAClF,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC3E,OAAO,eAAe,CAAC;IACzB,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,aAAa,CAAC;IAC1F,0EAA0E;IAC1E,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACnD,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC;IACjF,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,CAAC,8BAA8B;IAC7E,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,YAAY,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sDAAsD;AACtD,MAAM,cAAc,GAA6B;IAC/C,mBAAmB,EAAE,aAAa;IAClC,mBAAmB,EAAE,aAAa;IAClC,kBAAkB,EAAE,mBAAmB;IACvC,WAAW,EAAE,oBAAoB;IACjC,aAAa,EAAE,eAAe;IAC9B,WAAW,EAAE,eAAe;IAC5B,eAAe,EAAE,aAAa;IAC9B,aAAa,EAAE,aAAa;IAC5B,kBAAkB,EAAE,cAAc;IAClC,gBAAgB,EAAE,YAAY;IAC9B,sBAAsB,EAAE,aAAa;IACrC,uBAAuB,EAAE,eAAe;IACxC,SAAS,EAAE,aAAa;IACxB,YAAY,EAAE,aAAa;CAC5B,CAAC;AAEF,8EAA8E;AAC9E,MAAM,oBAAoB,GAA6B;IACrD,oBAAoB,EAAE,iBAAiB;IACvC,aAAa,EAAE,iBAAiB;IAChC,wBAAwB,EAAE,iBAAiB;IAC3C,sBAAsB,EAAE,mBAAmB;IAC3C,eAAe,EAAE,mBAAmB;IACpC,qBAAqB,EAAE,kBAAkB;IACzC,WAAW,EAAE,kBAAkB;IAC/B,uBAAuB,EAAE,kBAAkB;IAC3C,aAAa,EAAE,kBAAkB;CAClC,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,YAAY,GAAa;IACpC,EAAE,EAAE,aAAa;IACjB,WAAW,EAAE,6EAA6E;IAC1F,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE;QACL,aAAa;QACb,kBAAkB;QAClB,mBAAmB;QACnB,oBAAoB;QACpB,cAAc;QACd,aAAa;QACb,YAAY;QACZ,aAAa;QACb,eAAe;QACf,iBAAiB;QACjB,mBAAmB;QACnB,kBAAkB;QAClB,oBAAoB;QACpB,sBAAsB;QACtB,iBAAiB;KAClB;IACD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,eAAe,CAAC;IAClD,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,SAAS,CAAC,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YAC5C,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,mDAAmD;YACtE,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CACnF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CACnF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,uEAAuE;QACvE,0EAA0E;QAC1E,uDAAuD;QACvD,SAAS,CAAC,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACzC,MAAM,IAAI,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CACnF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,6DAA6D;QAC7D,SAAS,CAAC,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YAC3C,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,oBAAoB,EAAE;gBACpC,IAAI;gBACJ,OAAO;gBACP,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;aACzB,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,uEAAuE;QACvE,SAAS,CAAC,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YAC7C,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,sBAAsB,EAAE;gBACtC,IAAI;gBACJ,OAAO;gBACP,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;aACzB,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,gEAAgE;QAChE,SAAS,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACxC,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,iBAAiB,EAAE;gBACjC,IAAI;gBACJ,OAAO;gBACP,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;aACzB,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC","sourcesContent":["/**\n * Source-code detector for classical, non-quantum-safe asymmetric cryptography\n * in Java / Kotlin (the JCA — Java Cryptography Architecture). Same lexical\n * strategy as the other language packs.\n *\n * The JCA funnels almost everything through a handful of factory methods keyed\n * by an ALGORITHM STRING: `KeyPairGenerator.getInstance(\"RSA\")`,\n * `Signature.getInstance(\"SHA256withECDSA\")`, `Cipher.getInstance(\"RSA/ECB/…\")`,\n * `KeyAgreement.getInstance(\"ECDH\")`. So detection here is two steps: match the\n * `<Factory>.getInstance(\"<alg>\")` call, then classify the (factory, alg) pair\n * into a rule. Symmetric / hashing algorithms (\"AES\", \"HmacSHA256\", …) classify\n * to nothing and are ignored. A small set of BouncyCastle lightweight-API class\n * names (`new ECDSASigner()`, `new X25519Agreement()`, …) is matched directly.\n *\n * HNDL policy mirrors the other detectors: KEM / key agreement (RSA encryption,\n * (EC)DH, X25519/X448) is harvest-now-decrypt-later exposed (hndl:true);\n * signatures (RSA/ECDSA/DSA/EdDSA) are hndl:false but forgeable by a quantum\n * attacker. `KeyPairGenerator.getInstance(\"EC\")` is ambiguous (an EC key feeds\n * both ECDSA and ECDH), so it is classified conservatively as\n * key-exchange-capable (hndl:true), exactly as the Node/Python EC keygen rules.\n */\nimport type { Detector, Finding, RuleMeta } from \"../types.js\";\nimport { JAVA_EXTENSIONS, eachMatch, findingFromRule, hasExtension } from \"../detect-utils.js\";\nimport { CWE_BROKEN_CRYPTO, CWE_CERT_VALIDATION, CWE_WEAK_STRENGTH } from \"../cwe.js\";\n\n/* -------------------------------------------------------------------------- */\n/* Regexes                                                                    */\n/* -------------------------------------------------------------------------- */\n\n// <Factory>.getInstance(\"<alg>\") — the JCA entry points that carry asymmetric\n// algorithms. KeyGenerator/MessageDigest/Mac are intentionally excluded (they\n// are symmetric / hashing only).\nconst RE_JAVA_GETINSTANCE =\n  /\\b(KeyPairGenerator|Signature|Cipher|KeyAgreement|KeyFactory)\\s*\\.\\s*getInstance\\s*\\(\\s*\"([^\"]+)\"/g;\n\n// BouncyCastle lightweight-API class instantiations.\nconst RE_JAVA_BC =\n  /\\bnew\\s+(RSAKeyPairGenerator|DSAKeyPairGenerator|ECKeyPairGenerator|ECDSASigner|Ed25519Signer|Ed448Signer|X25519Agreement|X448Agreement|ECDHBasicAgreement|DHBasicAgreement|X25519KeyPairGenerator|Ed25519KeyPairGenerator|RSAEngine|OAEPEncoding)\\s*\\(/g;\n\n// BouncyCastle lightweight-API curve/EdDSA classes as a BARE constructor call —\n// the Kotlin form (`X448KeyPairGenerator()`, no `new` keyword). RE_JAVA_BC above\n// only matches the Java `new <Class>(` form, so Kotlin sources that drive the\n// lightweight API directly are missed. The negative lookbehind `(?<!\\bnew\\s+)`\n// keeps this additive: `new X448Agreement(` stays with RE_JAVA_BC (java-xdh),\n// while bare `X448Agreement(` routes to the family-specific rules below. Scoped\n// to the exact X448/X25519/Ed448/Ed25519 class names to stay precise.\nconst RE_JAVA_BC_CURVE =\n  /(?<!\\bnew\\s+)\\b(X448KeyPairGenerator|X448Agreement|X448PrivateKeyParameters|X25519KeyPairGenerator|X25519Agreement|Ed448KeyPairGenerator|Ed448Signer|Ed25519KeyPairGenerator|Ed25519Signer)\\s*\\(/g;\n\n// Insecure JSSE / TLS configuration expressed in Java source. Mirrors the JS\n// tlsDetector in source.ts (category \"tls\"): a legacy SSL/TLS protocol version\n// requested from SSLContext, and TLS hostname verification neutered via an\n// all-trusting verifier (Apache HttpClient's NoopHostnameVerifier /\n// ALLOW_ALL_HOSTNAME_VERIFIER).\nconst RE_JAVA_TLS_LEGACY = /\\bSSLContext\\s*\\.\\s*getInstance\\s*\\(\\s*\"(SSL|SSLv3|TLSv1)\"/g;\nconst RE_JAVA_TLS_NOVERIFY = /\\b(NoopHostnameVerifier|ALLOW_ALL_HOSTNAME_VERIFIER)\\b/g;\n\n// Identifier-form JWT/JOSE signature algorithms (audit F7). The quoted-string\n// alg token (\"RS256\") is caught by the language-agnostic jwt-jose detector, but\n// the Java JWT libraries pass the alg as an IDENTIFIER, not a string literal:\n// jjwt's `SignatureAlgorithm.RS256` and auth0 java-jwt's `Algorithm.RSA256` /\n// `Algorithm.ECDSA256`. (\"SignatureAlgorithm\" has no word boundary before its\n// \"Algorithm\", so the auth0 branch cannot re-match the jjwt form.)\nconst RE_JAVA_JWT_ALG =\n  /\\bSignatureAlgorithm\\.(?:RS|PS|ES)(?:256|384|512)\\b|\\bAlgorithm\\.(?:RSA|ECDSA)(?:256|384|512)\\b/g;\n\n/* -------------------------------------------------------------------------- */\n/* Rule catalog                                                               */\n/* -------------------------------------------------------------------------- */\n\nconst RULE_JAVA_RSA: RuleMeta = {\n  id: \"java-rsa\",\n  title: \"Java RSA key/encryption\",\n  description: \"JCA RSA KeyPairGenerator / Cipher / KeyFactory\",\n  category: \"kem\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"RSA\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Classical RSA (Java/JCA) is not quantum-safe and RSA encryption is HNDL-exposed.\",\n};\nconst RULE_JAVA_RSA_SIGN: RuleMeta = {\n  id: \"java-rsa-sign\",\n  title: \"Java RSA signature\",\n  description: 'JCA Signature.getInstance(\"…withRSA\")',\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"RSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Classical RSA signing (Java/JCA) is forgeable by a quantum attacker.\",\n  remediation: \"ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205)\",\n};\nconst RULE_JAVA_EC_KEYGEN: RuleMeta = {\n  id: \"java-ec-keygen\",\n  title: \"Java EC key generation\",\n  description: 'JCA KeyPairGenerator.getInstance(\"EC\")',\n  category: \"key-exchange\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"ECDH\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"Generates a classical EC key pair (Java/JCA). EC keys feed BOTH ECDSA signatures and ECDH key agreement; the ECDH path is harvest-now-decrypt-later exposed.\",\n  remediation:\n    \"For key agreement: hybrid X25519MLKEM768 (ML-KEM-768). For signatures: ML-DSA-65 (FIPS 204).\",\n};\nconst RULE_JAVA_ECDSA_SIGN: RuleMeta = {\n  id: \"java-ecdsa-sign\",\n  title: \"Java ECDSA signature\",\n  description: 'JCA Signature.getInstance(\"…withECDSA\")',\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"ECDSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Classical ECDSA signing (Java/JCA) is forgeable by a quantum attacker.\",\n  remediation: \"ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205)\",\n};\nconst RULE_JAVA_ECDH: RuleMeta = {\n  id: \"java-ecdh\",\n  title: \"Java ECDH key agreement\",\n  description: 'JCA KeyAgreement.getInstance(\"ECDH\")',\n  category: \"key-exchange\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"ECDH\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"Elliptic-curve Diffie-Hellman (Java/JCA) is broken by Shor's algorithm (harvest-now-decrypt-later).\",\n};\nconst RULE_JAVA_DSA: RuleMeta = {\n  id: \"java-dsa\",\n  title: \"Java DSA key/signature\",\n  description: \"JCA DSA KeyPairGenerator / Signature\",\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"DSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Classical DSA (Java/JCA) is deprecated and forgeable by a quantum attacker.\",\n  remediation: \"Rotate off DSA and migrate to ML-DSA-65 (FIPS 204).\",\n};\nconst RULE_JAVA_DH: RuleMeta = {\n  id: \"java-dh\",\n  title: \"Java Diffie-Hellman key exchange\",\n  description: \"JCA DiffieHellman KeyPairGenerator / KeyAgreement\",\n  category: \"key-exchange\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"DH\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"Finite-field Diffie-Hellman (Java/JCA) is broken by Shor's algorithm (harvest-now-decrypt-later).\",\n};\nconst RULE_JAVA_XDH: RuleMeta = {\n  id: \"java-xdh\",\n  title: \"Java X25519/X448 key agreement\",\n  description: \"JCA XDH / X25519 / X448 (KeyPairGenerator / KeyAgreement)\",\n  category: \"key-exchange\",\n  severity: \"medium\",\n  confidence: \"high\",\n  algorithm: \"X25519\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"X25519/X448 (Java/JCA) is modern but still classical key agreement — harvest-now-decrypt-later.\",\n};\nconst RULE_JAVA_EDDSA: RuleMeta = {\n  id: \"java-eddsa\",\n  title: \"Java Ed25519/Ed448 signature\",\n  description: \"JCA EdDSA / Ed25519 / Ed448\",\n  category: \"signature\",\n  severity: \"low\",\n  confidence: \"high\",\n  algorithm: \"EdDSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Ed25519/Ed448 (Java/JCA) is a modern but still classical signature scheme.\",\n};\n// BouncyCastle lightweight-API rules for bare (Kotlin-form) constructor calls.\n// Split by family so X448 and X25519 report their own algorithm string (java-xdh\n// lumps both under \"X25519\"). Severity/CWE copied from the JCA siblings above.\nconst RULE_JAVA_BC_X448: RuleMeta = {\n  id: \"java-bc-x448\",\n  title: \"Java/Kotlin X448 key agreement (BouncyCastle lightweight API)\",\n  description: \"BouncyCastle X448KeyPairGenerator / X448Agreement / X448PrivateKeyParameters\",\n  category: \"key-exchange\",\n  severity: \"medium\",\n  confidence: \"high\",\n  algorithm: \"X448\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"X448 (Java/Kotlin, BouncyCastle lightweight API) is modern but still classical key agreement — harvest-now-decrypt-later.\",\n};\nconst RULE_JAVA_BC_X25519: RuleMeta = {\n  id: \"java-bc-x25519\",\n  title: \"Java/Kotlin X25519 key agreement (BouncyCastle lightweight API)\",\n  description: \"BouncyCastle X25519KeyPairGenerator / X25519Agreement\",\n  category: \"key-exchange\",\n  severity: \"medium\",\n  confidence: \"high\",\n  algorithm: \"X25519\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"X25519 (Java/Kotlin, BouncyCastle lightweight API) is modern but still classical key agreement — harvest-now-decrypt-later.\",\n};\nconst RULE_JAVA_BC_EDDSA: RuleMeta = {\n  id: \"java-bc-eddsa\",\n  title: \"Java/Kotlin Ed25519/Ed448 signature (BouncyCastle lightweight API)\",\n  description:\n    \"BouncyCastle Ed448KeyPairGenerator / Ed448Signer / Ed25519KeyPairGenerator / Ed25519Signer\",\n  category: \"signature\",\n  severity: \"low\",\n  confidence: \"high\",\n  algorithm: \"EdDSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"Ed25519/Ed448 (Java/Kotlin, BouncyCastle lightweight API) is a modern but still classical signature scheme.\",\n};\nconst RULE_JAVA_TLS_LEGACY: RuleMeta = {\n  id: \"java-tls-legacy-version\",\n  title: \"Legacy SSL/TLS version requested\",\n  description: 'SSLContext.getInstance(\"SSL\" | \"SSLv3\" | \"TLSv1\")',\n  category: \"tls\",\n  severity: \"medium\",\n  confidence: \"high\",\n  hndl: false,\n  cwe: CWE_WEAK_STRENGTH,\n  message: \"SSL/SSLv3/TLS 1.0 are deprecated and insecure (Java/JSSE); require TLS 1.3.\",\n  remediation: 'Use SSLContext.getInstance(\"TLSv1.3\") and prefer PQC-hybrid key exchange.',\n};\nconst RULE_JAVA_TLS_NOVERIFY: RuleMeta = {\n  id: \"java-tls-hostname-verification-disabled\",\n  title: \"TLS hostname verification disabled\",\n  description: \"NoopHostnameVerifier / ALLOW_ALL_HOSTNAME_VERIFIER\",\n  category: \"tls\",\n  severity: \"high\",\n  confidence: \"high\",\n  hndl: false,\n  cwe: CWE_CERT_VALIDATION,\n  message: \"An all-trusting hostname verifier (Java) disables TLS hostname checking (MITM risk).\",\n  remediation: \"Remove the all-trusting verifier; rely on the default hostname verifier.\",\n};\nconst RULE_JAVA_JWT_ALG: RuleMeta = {\n  id: \"java-jwt-alg\",\n  title: \"Java identifier-form JWT/JOSE algorithm\",\n  description: \"jjwt SignatureAlgorithm.RS/PS/ES* / auth0 Algorithm.RSA*/ECDSA*\",\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"unknown\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"A classical JWT/JOSE signature algorithm (Java, identifier form) is used, forgeable by a quantum attacker.\",\n  remediation: \"ML-DSA-65 (FIPS 204); track IETF PQC JOSE/COSE algorithms\",\n};\n\n/**\n * Classify a `<factory>.getInstance(\"<alg>\")` pair into a rule, or null when the\n * algorithm is not classical asymmetric crypto (AES, HMAC, PBKDF2, hashes, …).\n * `alg` is normalised to upper-case with any Cipher transformation suffix\n * (`RSA/ECB/OAEPPadding` → `RSA`) stripped.\n */\nfunction classifyGetInstance(factory: string, rawAlg: string): RuleMeta | null {\n  const alg = rawAlg.split(\"/\")[0].trim().toUpperCase();\n  const isSignature = factory === \"Signature\";\n\n  if (alg.includes(\"ECDSA\")) return RULE_JAVA_ECDSA_SIGN;\n  if (alg.includes(\"ECDH\")) return RULE_JAVA_ECDH;\n  if (alg === \"EC\") return isSignature ? RULE_JAVA_ECDSA_SIGN : RULE_JAVA_EC_KEYGEN;\n  if (alg.includes(\"ED25519\") || alg.includes(\"ED448\") || alg.includes(\"EDDSA\"))\n    return RULE_JAVA_EDDSA;\n  if (alg.includes(\"X25519\") || alg.includes(\"X448\") || alg === \"XDH\") return RULE_JAVA_XDH;\n  // RSASSA-PSS is an RSA *signature* scheme, not encryption/KEM. The string\n  // contains \"RSA\", so it must be caught here — BEFORE the generic RSA branch\n  // below, which would otherwise (mis)classify it as HNDL-exposed RSA\n  // encryption (java-rsa / hndl:true). Signatures are hndl:false. (Fixes F8.)\n  if (alg.includes(\"PSS\")) return RULE_JAVA_RSA_SIGN;\n  if (alg.includes(\"RSA\")) return isSignature ? RULE_JAVA_RSA_SIGN : RULE_JAVA_RSA;\n  if (alg.includes(\"DSA\")) return RULE_JAVA_DSA; // ECDSA already handled above\n  if (alg.includes(\"DH\") || alg.includes(\"DIFFIEHELLMAN\")) return RULE_JAVA_DH;\n  return null;\n}\n\n/** BouncyCastle lightweight-API class name → rule. */\nconst BC_CLASS_RULES: Record<string, RuleMeta> = {\n  RSAKeyPairGenerator: RULE_JAVA_RSA,\n  DSAKeyPairGenerator: RULE_JAVA_DSA,\n  ECKeyPairGenerator: RULE_JAVA_EC_KEYGEN,\n  ECDSASigner: RULE_JAVA_ECDSA_SIGN,\n  Ed25519Signer: RULE_JAVA_EDDSA,\n  Ed448Signer: RULE_JAVA_EDDSA,\n  X25519Agreement: RULE_JAVA_XDH,\n  X448Agreement: RULE_JAVA_XDH,\n  ECDHBasicAgreement: RULE_JAVA_ECDH,\n  DHBasicAgreement: RULE_JAVA_DH,\n  X25519KeyPairGenerator: RULE_JAVA_XDH,\n  Ed25519KeyPairGenerator: RULE_JAVA_EDDSA,\n  RSAEngine: RULE_JAVA_RSA,\n  OAEPEncoding: RULE_JAVA_RSA,\n};\n\n/** BouncyCastle lightweight-API bare-constructor class name → family rule. */\nconst BC_CURVE_CLASS_RULES: Record<string, RuleMeta> = {\n  X448KeyPairGenerator: RULE_JAVA_BC_X448,\n  X448Agreement: RULE_JAVA_BC_X448,\n  X448PrivateKeyParameters: RULE_JAVA_BC_X448,\n  X25519KeyPairGenerator: RULE_JAVA_BC_X25519,\n  X25519Agreement: RULE_JAVA_BC_X25519,\n  Ed448KeyPairGenerator: RULE_JAVA_BC_EDDSA,\n  Ed448Signer: RULE_JAVA_BC_EDDSA,\n  Ed25519KeyPairGenerator: RULE_JAVA_BC_EDDSA,\n  Ed25519Signer: RULE_JAVA_BC_EDDSA,\n};\n\n/** Detects classical asymmetric crypto in Java / Kotlin (JCA + BouncyCastle). */\nexport const javaDetector: Detector = {\n  id: \"java-crypto\",\n  description: \"Classical asymmetric crypto in Java/Kotlin (JCA getInstance + BouncyCastle)\",\n  scope: \"source\",\n  language: \"java\",\n  rules: [\n    RULE_JAVA_RSA,\n    RULE_JAVA_RSA_SIGN,\n    RULE_JAVA_EC_KEYGEN,\n    RULE_JAVA_ECDSA_SIGN,\n    RULE_JAVA_ECDH,\n    RULE_JAVA_DSA,\n    RULE_JAVA_DH,\n    RULE_JAVA_XDH,\n    RULE_JAVA_EDDSA,\n    RULE_JAVA_BC_X448,\n    RULE_JAVA_BC_X25519,\n    RULE_JAVA_BC_EDDSA,\n    RULE_JAVA_TLS_LEGACY,\n    RULE_JAVA_TLS_NOVERIFY,\n    RULE_JAVA_JWT_ALG,\n  ],\n  appliesTo: (f) => hasExtension(f, JAVA_EXTENSIONS),\n  detect({ file, content }): Finding[] {\n    const findings: Finding[] = [];\n\n    eachMatch(RE_JAVA_GETINSTANCE, content, (m) => {\n      const rule = classifyGetInstance(m[1], m[2]);\n      if (!rule) return; // symmetric / hashing algorithm — not our concern.\n      findings.push(\n        findingFromRule(rule, { file, content, index: m.index, matchLength: m[0].length }),\n      );\n    });\n\n    eachMatch(RE_JAVA_BC, content, (m) => {\n      const rule = BC_CLASS_RULES[m[1]];\n      if (!rule) return;\n      findings.push(\n        findingFromRule(rule, { file, content, index: m.index, matchLength: m[0].length }),\n      );\n    });\n\n    // BouncyCastle lightweight-API classes as a bare constructor call (Kotlin\n    // form, no `new`). RE_JAVA_BC_CURVE's negative lookbehind excludes the\n    // `new <Class>(` form already handled above, so this only adds the missed\n    // 448/25519 Kotlin-style matches — no double-counting.\n    eachMatch(RE_JAVA_BC_CURVE, content, (m) => {\n      const rule = BC_CURVE_CLASS_RULES[m[1]];\n      if (!rule) return;\n      findings.push(\n        findingFromRule(rule, { file, content, index: m.index, matchLength: m[0].length }),\n      );\n    });\n\n    // Legacy SSL/TLS protocol version requested from SSLContext.\n    eachMatch(RE_JAVA_TLS_LEGACY, content, (m) => {\n      findings.push(\n        findingFromRule(RULE_JAVA_TLS_LEGACY, {\n          file,\n          content,\n          index: m.index,\n          matchLength: m[0].length,\n        }),\n      );\n    });\n\n    // All-trusting hostname verifier — disables TLS hostname verification.\n    eachMatch(RE_JAVA_TLS_NOVERIFY, content, (m) => {\n      findings.push(\n        findingFromRule(RULE_JAVA_TLS_NOVERIFY, {\n          file,\n          content,\n          index: m.index,\n          matchLength: m[0].length,\n        }),\n      );\n    });\n\n    // Identifier-form JWT/JOSE signature algorithms (jjwt / auth0).\n    eachMatch(RE_JAVA_JWT_ALG, content, (m) => {\n      findings.push(\n        findingFromRule(RULE_JAVA_JWT_ALG, {\n          file,\n          content,\n          index: m.index,\n          matchLength: m[0].length,\n        }),\n      );\n    });\n\n    return findings;\n  },\n};\n"]}