@quantakrypto/core 0.4.2 → 0.4.4

package/dist/detectors/cicd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cicd.js","sourceRoot":"","sources":["../../src/detectors/cicd.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,2EAA2E;AAC3E,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC;IAC7C,OAAO,CACL,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7F,IAAI,KAAK,gBAAgB;QACzB,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAChC,IAAI,KAAK,aAAa;QACtB,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC9B,IAAI,KAAK,qBAAqB;QAC9B,IAAI,KAAK,sBAAsB;QAC/B,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CACtF,CAAC;AACJ,CAAC;AAOD,MAAM,QAAQ,GAAa;IACzB;QACE,EAAE,EAAE,2DAA2D;QAC/D,IAAI,EAAE;YACJ,EAAE,EAAE,iBAAiB;YACrB,KAAK,EAAE,iCAAiC;YACxC,WAAW,EAAE,0CAA0C;YACvD,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,iBAAiB;YACtB,OAAO,EACL,4IAA4I;YAC9I,WAAW,EACT,+GAA+G;SAClH;KACF;IACD;QACE,EAAE,EAAE,qDAAqD;QACzD,IAAI,EAAE;YACJ,EAAE,EAAE,aAAa;YACjB,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,+CAA+C;YAC5D,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,iBAAiB;YACtB,OAAO,EACL,2FAA2F;YAC7F,WAAW,EAAE,0EAA0E;SACxF;KACF;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE;YACJ,EAAE,EAAE,cAAc;YAClB,KAAK,EAAE,4BAA4B;YACnC,WAAW,EAAE,6CAA6C;YAC1D,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,iBAAiB;YACtB,OAAO,EACL,yGAAyG;YAC3G,WAAW,EACT,yFAAyF;SAC5F;KACF;IACD;QACE,EAAE,EAAE,iCAAiC;QACrC,IAAI,EAAE;YACJ,EAAE,EAAE,aAAa;YACjB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,iCAAiC;YAC9C,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,iBAAiB;YACtB,OAAO,EACL,uGAAuG;YACzG,WAAW,EAAE,6EAA6E;SAC3F;KACF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE;YACJ,EAAE,EAAE,aAAa;YACjB,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EAAE,mCAAmC;YAChD,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,iBAAiB;YACtB,OAAO,EACL,mGAAmG;YACrG,WAAW,EAAE,+DAA+D;SAC7E;KACF;CACF,CAAC;AAEF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,YAAY,GAAa;IACpC,EAAE,EAAE,cAAc;IAClB,WAAW,EAAE,sDAAsD;IACnE,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClC,SAAS,EAAE,gBAAgB;IAC3B,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChC,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CACxF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC","sourcesContent":["/**\n * Config detector: classical signing of build artifacts and code in CI/CD\n * pipelines (GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, CircleCI).\n *\n * Artifact and code signatures are the signature-side analogue of \"harvest now,\n * decrypt later\": a release signed today with a classical key is *forgeable* once\n * a CRQC exists, and long-lived artifacts (container images, released binaries,\n * SBOM attestations) keep verifying against that classical public key for years.\n * So these are flagged `hndl:false` (a signature is not confidentiality — nothing\n * to harvest) but remain real quantum-migration debt.\n *\n * Covered command invocations (distinctive enough inside a CI file that the\n * false-positive risk is low):\n *  - `cosign sign|attest|generate-key-pair`  → sigstore/cosign uses ECDSA P-256\n *    (both key-based and keyless/Fulcio).\n *  - `gpg --detach-sign|--clearsign|--sign`   → GnuPG, classically RSA.\n *  - `jarsigner`                              → Java JAR signing (RSA/DSA/EC).\n *  - `codesign --sign|-s`                     → Apple code signing (RSA).\n *  - `minisign`                               → Ed25519 signatures.\n *\n * Gated to CI/CD pipeline files so `gpg`/`cosign` mentioned in a shell script or\n * doc does not fire; the surface here is specifically the release pipeline.\n */\nimport type { Detector, Finding, RuleMeta } from \"../types.js\";\nimport { eachMatch, findingFromRule } from \"../detect-utils.js\";\nimport { CWE_BROKEN_CRYPTO } from \"../cwe.js\";\n\n/** True for the CI/CD pipeline definition files this detector inspects. */\nfunction isCiPipelineFile(filePath: string): boolean {\n  const lower = filePath.toLowerCase();\n  const base = lower.split(\"/\").pop() ?? lower;\n  return (\n    (lower.includes(\".github/workflows/\") && (lower.endsWith(\".yml\") || lower.endsWith(\".yaml\"))) ||\n    base === \".gitlab-ci.yml\" ||\n    lower.endsWith(\".gitlab-ci.yml\") ||\n    base === \"jenkinsfile\" ||\n    lower.endsWith(\".jenkinsfile\") ||\n    base === \"azure-pipelines.yml\" ||\n    base === \"azure-pipelines.yaml\" ||\n    (lower.includes(\".circleci/\") && (lower.endsWith(\".yml\") || lower.endsWith(\".yaml\")))\n  );\n}\n\ninterface CiRule {\n  re: RegExp;\n  meta: RuleMeta;\n}\n\nconst CI_RULES: CiRule[] = [\n  {\n    re: /\\bcosign\\s+(?:sign|attest|sign-blob|generate-key-pair)\\b/g,\n    meta: {\n      id: \"ci-cosign-ecdsa\",\n      title: \"cosign artifact signing (ECDSA)\",\n      description: \"sigstore/cosign signing in a CI pipeline\",\n      category: \"signature\",\n      severity: \"medium\",\n      confidence: \"high\",\n      algorithm: \"ECDSA\",\n      hndl: false,\n      cwe: CWE_BROKEN_CRYPTO,\n      message:\n        \"CI pipeline signs artifacts with cosign (ECDSA P-256, key-based or keyless/Fulcio); classical signatures are forgeable once a CRQC exists.\",\n      remediation:\n        \"Track sigstore's post-quantum signing roadmap (ML-DSA); plan hybrid signing for long-lived release artifacts.\",\n    },\n  },\n  {\n    re: /\\bgpg\\b[^\\n]*?\\s--(?:detach-sign|clearsign|sign)\\b/g,\n    meta: {\n      id: \"ci-gpg-sign\",\n      title: \"GPG signing (RSA)\",\n      description: \"GnuPG detached/clear signing in a CI pipeline\",\n      category: \"signature\",\n      severity: \"medium\",\n      confidence: \"high\",\n      algorithm: \"RSA\",\n      hndl: false,\n      cwe: CWE_BROKEN_CRYPTO,\n      message:\n        \"CI pipeline signs with GPG, classically an RSA signing key; forgeable once a CRQC exists.\",\n      remediation: \"Plan migration to ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205) signatures.\",\n    },\n  },\n  {\n    re: /\\bjarsigner\\b/g,\n    meta: {\n      id: \"ci-jarsigner\",\n      title: \"Java jarsigner (classical)\",\n      description: \"JDK jarsigner code signing in a CI pipeline\",\n      category: \"signature\",\n      severity: \"medium\",\n      confidence: \"high\",\n      algorithm: \"RSA\",\n      hndl: false,\n      cwe: CWE_BROKEN_CRYPTO,\n      message:\n        \"CI pipeline signs JARs with jarsigner (classical RSA/DSA/EC signing key); forgeable once a CRQC exists.\",\n      remediation:\n        \"Plan migration to a PQC signature scheme (ML-DSA-65 / SLH-DSA) as the JDK adds support.\",\n    },\n  },\n  {\n    re: /\\bcodesign\\s+(?:-s\\b|--sign\\b)/g,\n    meta: {\n      id: \"ci-codesign\",\n      title: \"Apple codesign (RSA)\",\n      description: \"Apple codesign in a CI pipeline\",\n      category: \"signature\",\n      severity: \"medium\",\n      confidence: \"high\",\n      algorithm: \"RSA\",\n      hndl: false,\n      cwe: CWE_BROKEN_CRYPTO,\n      message:\n        \"CI pipeline signs with Apple codesign (classical RSA signing identity); forgeable once a CRQC exists.\",\n      remediation: \"Classical only today; track Apple's PQC signing support and plan migration.\",\n    },\n  },\n  {\n    re: /\\bminisign\\b/g,\n    meta: {\n      id: \"ci-minisign\",\n      title: \"minisign (Ed25519)\",\n      description: \"minisign signing in a CI pipeline\",\n      category: \"signature\",\n      severity: \"low\",\n      confidence: \"high\",\n      algorithm: \"EdDSA\",\n      hndl: false,\n      cwe: CWE_BROKEN_CRYPTO,\n      message:\n        \"CI pipeline signs with minisign (Ed25519); modern but classical and forgeable once a CRQC exists.\",\n      remediation: \"Plan migration to ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205).\",\n    },\n  },\n];\n\n/** Detects classical artifact / code signing in CI/CD pipeline definitions. */\nexport const cicdDetector: Detector = {\n  id: \"cicd-signing\",\n  description: \"Classical artifact / code signing in CI/CD pipelines\",\n  scope: \"config\",\n  language: \"any\",\n  rules: CI_RULES.map((r) => r.meta),\n  appliesTo: isCiPipelineFile,\n  detect({ file, content }): Finding[] {\n    const findings: Finding[] = [];\n    for (const rule of CI_RULES) {\n      eachMatch(rule.re, content, (m) => {\n        findings.push(\n          findingFromRule(rule.meta, { file, content, index: m.index, matchLength: m[0].length }),\n        );\n      });\n    }\n    return findings;\n  },\n};\n"]}

package/dist/detectors/cloud-kms.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Cloud-KMS SDK detector: classical asymmetric keys minted at RUNTIME through a
+ * cloud KMS SDK call — the application-code counterpart to the Terraform detector
+ * (which covers the infrastructure-as-code path). AWS KMS `CreateKey` /
+ * `GenerateDataKeyPair` select the key type with a `KeySpec` / `KeyPairSpec`
+ * (legacy `CustomerMasterKeySpec`) field whose value is `RSA_*` or `ECC_*`.
+ *
+ * These PascalCase field names + `RSA_2048` / `ECC_NIST_P256` values are specific
+ * to the AWS KMS API across every SDK language (JS/TS, Python/boto3, Java, Go,
+ * the CLI, JSON policies), so a single lexical rule catches them all with a very
+ * low false-positive rate. Terraform uses the snake_case `customer_master_key_spec`
+ * instead, so this never double-counts with the IaC detector.
+ *
+ * HNDL: an RSA KMS key (encryption/KEM) and an EC KMS key (which AWS KMS can use
+ * for ECDH key agreement as well as ECDSA signing) are both harvest-now-decrypt-
+ * later exposed → hndl:true.
+ */
+import type { Detector } from "../types.js";
+/** Detects classical asymmetric keys provisioned via a cloud KMS SDK call. */
+export declare const cloudKmsDetector: Detector;
+//# sourceMappingURL=cloud-kms.d.ts.map

package/dist/detectors/cloud-kms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-kms.d.ts","sourceRoot":"","sources":["../../src/detectors/cloud-kms.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAC;AAyC/D,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,EAAE,QA2B9B,CAAC"}

package/dist/detectors/cloud-kms.js

@@ -0,0 +1,57 @@
+import { eachMatch, findingFromRule } from "../detect-utils.js";
+import { CWE_BROKEN_CRYPTO } from "../cwe.js";
+// The AWS KMS key-spec fields (CreateKey / GenerateDataKeyPair / legacy CMK). The
+// optional `"?` after the field name accepts both the JS/HCL form (`KeySpec:`) and
+// the JSON form where the key is quoted (`"KeySpec":`).
+const SPEC_KEYS = "KeySpec|KeyPairSpec|CustomerMasterKeySpec";
+const RE_KMS_RSA = new RegExp(`\\b(?:${SPEC_KEYS})"?\\s*[:=]\\s*['"]RSA_\\d+['"]`, "g");
+const RE_KMS_EC = new RegExp(`\\b(?:${SPEC_KEYS})"?\\s*[:=]\\s*['"]ECC_[A-Z0-9_]+['"]`, "g");
+const RULE_KMS_RSA = {
+    id: "cloud-kms-rsa",
+    title: "AWS KMS RSA key",
+    description: "AWS KMS CreateKey / GenerateDataKeyPair with an RSA_* key spec",
+    category: "kem",
+    severity: "high",
+    confidence: "high",
+    algorithm: "RSA",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "Mints a classical RSA key via the AWS KMS SDK (harvest-now-decrypt-later exposed for encryption).",
+    remediation: "Plan migration to PQC as cloud KMS adds ML-KEM / ML-DSA key specs.",
+};
+const RULE_KMS_EC = {
+    id: "cloud-kms-ec",
+    title: "AWS KMS EC key",
+    description: "AWS KMS CreateKey / GenerateDataKeyPair with an ECC_* key spec",
+    category: "key-exchange",
+    severity: "high",
+    confidence: "high",
+    algorithm: "ECDH",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "Mints a classical EC key via the AWS KMS SDK; EC keys feed ECDSA signatures and ECDH key agreement (the ECDH path is harvest-now-decrypt-later exposed).",
+    remediation: "For key agreement: hybrid X25519MLKEM768 (ML-KEM-768). For signatures: ML-DSA-65 (FIPS 204).",
+};
+/** Detects classical asymmetric keys provisioned via a cloud KMS SDK call. */
+export const cloudKmsDetector = {
+    id: "cloud-kms",
+    description: "Classical asymmetric keys minted via a cloud KMS SDK (AWS KMS)",
+    scope: "config",
+    language: "any",
+    rules: [RULE_KMS_RSA, RULE_KMS_EC],
+    appliesTo: () => true,
+    detect({ file, content }) {
+        // Fast reject: only proceed if a KMS key-spec field name is present.
+        if (!content.includes("KeySpec") &&
+            !content.includes("KeyPairSpec") &&
+            !content.includes("CustomerMasterKeySpec")) {
+            return [];
+        }
+        const findings = [];
+        const add = (re, rule) => eachMatch(re, content, (m) => findings.push(findingFromRule(rule, { file, content, index: m.index, matchLength: m[0].length })));
+        add(RE_KMS_RSA, RULE_KMS_RSA);
+        add(RE_KMS_EC, RULE_KMS_EC);
+        return findings;
+    },
+};
+//# sourceMappingURL=cloud-kms.js.map

package/dist/detectors/cloud-kms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-kms.js","sourceRoot":"","sources":["../../src/detectors/cloud-kms.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,kFAAkF;AAClF,mFAAmF;AACnF,wDAAwD;AACxD,MAAM,SAAS,GAAG,2CAA2C,CAAC;AAC9D,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,SAAS,SAAS,iCAAiC,EAAE,GAAG,CAAC,CAAC;AACxF,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,SAAS,SAAS,uCAAuC,EAAE,GAAG,CAAC,CAAC;AAE7F,MAAM,YAAY,GAAa;IAC7B,EAAE,EAAE,eAAe;IACnB,KAAK,EAAE,iBAAiB;IACxB,WAAW,EAAE,gEAAgE;IAC7E,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,mGAAmG;IACrG,WAAW,EAAE,oEAAoE;CAClF,CAAC;AACF,MAAM,WAAW,GAAa;IAC5B,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,gBAAgB;IACvB,WAAW,EAAE,gEAAgE;IAC7E,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,0JAA0J;IAC5J,WAAW,EACT,8FAA8F;CACjG,CAAC;AAEF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAa;IACxC,EAAE,EAAE,WAAW;IACf,WAAW,EAAE,gEAAgE;IAC7E,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;IAClC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;IACrB,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QACtB,qEAAqE;QACrE,IACE,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC5B,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;YAChC,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAC1C,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,IAAc,EAAQ,EAAE,CAC/C,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3B,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CACnF,CACF,CAAC;QACJ,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9B,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5B,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC","sourcesContent":["/**\n * Cloud-KMS SDK detector: classical asymmetric keys minted at RUNTIME through a\n * cloud KMS SDK call — the application-code counterpart to the Terraform detector\n * (which covers the infrastructure-as-code path). AWS KMS `CreateKey` /\n * `GenerateDataKeyPair` select the key type with a `KeySpec` / `KeyPairSpec`\n * (legacy `CustomerMasterKeySpec`) field whose value is `RSA_*` or `ECC_*`.\n *\n * These PascalCase field names + `RSA_2048` / `ECC_NIST_P256` values are specific\n * to the AWS KMS API across every SDK language (JS/TS, Python/boto3, Java, Go,\n * the CLI, JSON policies), so a single lexical rule catches them all with a very\n * low false-positive rate. Terraform uses the snake_case `customer_master_key_spec`\n * instead, so this never double-counts with the IaC detector.\n *\n * HNDL: an RSA KMS key (encryption/KEM) and an EC KMS key (which AWS KMS can use\n * for ECDH key agreement as well as ECDSA signing) are both harvest-now-decrypt-\n * later exposed → hndl:true.\n */\nimport type { Detector, Finding, RuleMeta } from \"../types.js\";\nimport { eachMatch, findingFromRule } from \"../detect-utils.js\";\nimport { CWE_BROKEN_CRYPTO } from \"../cwe.js\";\n\n// The AWS KMS key-spec fields (CreateKey / GenerateDataKeyPair / legacy CMK). The\n// optional `\"?` after the field name accepts both the JS/HCL form (`KeySpec:`) and\n// the JSON form where the key is quoted (`\"KeySpec\":`).\nconst SPEC_KEYS = \"KeySpec|KeyPairSpec|CustomerMasterKeySpec\";\nconst RE_KMS_RSA = new RegExp(`\\\\b(?:${SPEC_KEYS})\"?\\\\s*[:=]\\\\s*['\"]RSA_\\\\d+['\"]`, \"g\");\nconst RE_KMS_EC = new RegExp(`\\\\b(?:${SPEC_KEYS})\"?\\\\s*[:=]\\\\s*['\"]ECC_[A-Z0-9_]+['\"]`, \"g\");\n\nconst RULE_KMS_RSA: RuleMeta = {\n  id: \"cloud-kms-rsa\",\n  title: \"AWS KMS RSA key\",\n  description: \"AWS KMS CreateKey / GenerateDataKeyPair with an RSA_* key spec\",\n  category: \"kem\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"RSA\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"Mints a classical RSA key via the AWS KMS SDK (harvest-now-decrypt-later exposed for encryption).\",\n  remediation: \"Plan migration to PQC as cloud KMS adds ML-KEM / ML-DSA key specs.\",\n};\nconst RULE_KMS_EC: RuleMeta = {\n  id: \"cloud-kms-ec\",\n  title: \"AWS KMS EC key\",\n  description: \"AWS KMS CreateKey / GenerateDataKeyPair with an ECC_* key spec\",\n  category: \"key-exchange\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"ECDH\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"Mints a classical EC key via the AWS KMS SDK; EC keys feed ECDSA signatures and ECDH key agreement (the ECDH path is harvest-now-decrypt-later exposed).\",\n  remediation:\n    \"For key agreement: hybrid X25519MLKEM768 (ML-KEM-768). For signatures: ML-DSA-65 (FIPS 204).\",\n};\n\n/** Detects classical asymmetric keys provisioned via a cloud KMS SDK call. */\nexport const cloudKmsDetector: Detector = {\n  id: \"cloud-kms\",\n  description: \"Classical asymmetric keys minted via a cloud KMS SDK (AWS KMS)\",\n  scope: \"config\",\n  language: \"any\",\n  rules: [RULE_KMS_RSA, RULE_KMS_EC],\n  appliesTo: () => true,\n  detect({ file, content }): Finding[] {\n    // Fast reject: only proceed if a KMS key-spec field name is present.\n    if (\n      !content.includes(\"KeySpec\") &&\n      !content.includes(\"KeyPairSpec\") &&\n      !content.includes(\"CustomerMasterKeySpec\")\n    ) {\n      return [];\n    }\n    const findings: Finding[] = [];\n    const add = (re: RegExp, rule: RuleMeta): void =>\n      eachMatch(re, content, (m) =>\n        findings.push(\n          findingFromRule(rule, { file, content, index: m.index, matchLength: m[0].length }),\n        ),\n      );\n    add(RE_KMS_RSA, RULE_KMS_RSA);\n    add(RE_KMS_EC, RULE_KMS_EC);\n    return findings;\n  },\n};\n"]}

package/dist/detectors/cloudformation.d.ts

@@ -0,0 +1,30 @@
+/**
+ * IaC detector: classical asymmetric cryptography (and legacy TLS config)
+ * declared in AWS CloudFormation / Azure ARM (incl. Bicep-compiled JSON)
+ * templates — plus CDK `cdk synth` output, which is plain CloudFormation
+ * JSON. This is a distinct surface from `terraform.ts`: CloudFormation/ARM
+ * use PascalCase JSON/YAML property names, never Terraform's snake_case HCL
+ * attributes, so the two detectors never collide on the same file.
+ *
+ * Covered:
+ *  - AWS::KMS::Key `KeySpec`:                    `"RSA_…"` (kem) / `"ECC_…"` (key-exchange)
+ *  - AWS::CertificateManager::Certificate
+ *    `KeyAlgorithm`:                             `"RSA_…"` / `"EC_…"` (certificate)
+ *  - CloudFront distribution `MinimumProtocolVersion`: legacy `TLSv1` / `TLSv1.1` (tls)
+ *  - ELB/ALB listener `SslPolicy`:                legacy `ELBSecurityPolicy-2016-08` /
+ *                                                 `-TLS-1-0-…` / `-TLS-1-1-…` (tls)
+ *  - Azure ARM `Microsoft.KeyVault` key `kty`:    `"RSA"` (kem) / `"EC"` (key-exchange)
+ *
+ * `KeySpec` is PascalCase and case-sensitive, so it never matches Terraform's
+ * snake_case `customer_master_key_spec` (same underlying AWS API, different
+ * authoring surface). A fast-reject on a CFN/ARM marker keeps this detector
+ * from ever firing on arbitrary JSON/YAML that happens to contain one of
+ * these property names in an unrelated context.
+ */
+import type { Detector } from "../types.js";
+/**
+ * Detects classical asymmetric crypto and legacy TLS config declared in
+ * AWS CloudFormation / Azure ARM (incl. Bicep-compiled JSON) templates.
+ */
+export declare const cloudformationDetector: Detector;
+//# sourceMappingURL=cloudformation.d.ts.map

package/dist/detectors/cloudformation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudformation.d.ts","sourceRoot":"","sources":["../../src/detectors/cloudformation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAC;AAsJ/D;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAqCpC,CAAC"}

package/dist/detectors/cloudformation.js

@@ -0,0 +1,170 @@
+import { eachMatch, findingFromRule, hasExtension } from "../detect-utils.js";
+import { CWE_BROKEN_CRYPTO, CWE_WEAK_STRENGTH } from "../cwe.js";
+const CFN_EXTENSIONS = [".json", ".yaml", ".yml"];
+// Fast-reject markers: at least one must appear before any rule regex runs, so
+// this detector never scans arbitrary JSON/YAML that merely happens to share
+// an attribute name (`KeySpec`, `kty`, …) with an unrelated schema.
+const CFN_MARKERS = [
+    "AWS::KMS",
+    "AWS::CertificateManager",
+    "AWSTemplateFormatVersion",
+    "MinimumProtocolVersion",
+    "Microsoft.KeyVault",
+    '"SslPolicy"',
+];
+// Each attribute is matched with an optional quote around the key and `:` as
+// the separator (both plain-JSON and YAML-block-scalar forms use `:`). The
+// `(?<![\w"-])` lookbehind stops a longer/prefixed attribute name from
+// matching on its suffix.
+const RE_CFN_KMS_RSA = /(?<![\w"-])"?KeySpec"?\s*:\s*"?RSA_\d+"?/g;
+const RE_CFN_KMS_EC = /(?<![\w"-])"?KeySpec"?\s*:\s*"?ECC_[A-Z0-9_]+"?/g;
+const RE_CFN_ACM_RSA = /(?<![\w"-])"?KeyAlgorithm"?\s*:\s*"?RSA_\d+"?/g;
+const RE_CFN_ACM_EC = /(?<![\w"-])"?KeyAlgorithm"?\s*:\s*"?EC_[A-Za-z0-9]+"?/g;
+// CloudFront: only the pre-2018 "TLSv1" / "TLSv1_2016" / "TLSv1.1_2016"
+// values are legacy; the lookahead delimiter stops this from matching a
+// "TLSv1.2_2018"-style value that merely starts with the same prefix.
+const RE_CFN_CLOUDFRONT_TLS = /(?<![\w"-])"?MinimumProtocolVersion"?\s*:\s*"?(?:TLSv1(?:\.1)?_2016|TLSv1)(?=["'\s,}]|$)/gm;
+// ELB/ALB legacy SSL negotiation policies (named, dated policy strings).
+const RE_CFN_ELB_TLS = /(?<![\w"-])"?SslPolicy"?\s*:\s*"ELBSecurityPolicy-(?:2016-08|TLS-1-0-\d{4}-\d{2}|TLS-1-1-\d{4}-\d{2})"/g;
+// Azure ARM Microsoft.KeyVault key resource `properties.kty`.
+const RE_CFN_ARM_KV_RSA = /(?<![\w"-])"?kty"?\s*:\s*"?RSA"?(?!\w)/g;
+const RE_CFN_ARM_KV_EC = /(?<![\w"-])"?kty"?\s*:\s*"?EC"?(?!\w)/g;
+const RULE_CFN_KMS_RSA = {
+    id: "cfn-kms-rsa",
+    title: "CloudFormation KMS RSA key",
+    description: 'AWS::KMS::Key KeySpec = "RSA_*"',
+    category: "kem",
+    severity: "high",
+    confidence: "high",
+    algorithm: "RSA",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "CloudFormation provisions a classical RSA KMS key (harvest-now-decrypt-later exposed for encryption CMKs).",
+    remediation: "Plan migration to PQC as cloud KMS adds ML-KEM / ML-DSA key specs.",
+};
+const RULE_CFN_KMS_EC = {
+    id: "cfn-kms-ec",
+    title: "CloudFormation KMS EC key",
+    description: 'AWS::KMS::Key KeySpec = "ECC_*"',
+    category: "key-exchange",
+    severity: "high",
+    confidence: "high",
+    algorithm: "ECDH",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "CloudFormation provisions a classical EC KMS key; EC keys feed ECDSA signatures and ECDH key agreement (the ECDH path is harvest-now-decrypt-later exposed).",
+    remediation: "For key agreement: hybrid X25519MLKEM768 (ML-KEM-768). For signatures: ML-DSA-65 (FIPS 204).",
+};
+const RULE_CFN_ACM_RSA = {
+    id: "cfn-acm-rsa",
+    title: "CloudFormation ACM RSA certificate",
+    description: 'AWS::CertificateManager::Certificate KeyAlgorithm = "RSA_*"',
+    category: "certificate",
+    severity: "high",
+    confidence: "high",
+    algorithm: "RSA",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "CloudFormation provisions an ACM certificate with a classical RSA key, which is not quantum-safe.",
+    remediation: "Plan migration to PQC (ML-KEM-768 for encryption, ML-DSA-65 for signatures).",
+};
+const RULE_CFN_ACM_EC = {
+    id: "cfn-acm-ec",
+    title: "CloudFormation ACM EC certificate",
+    description: 'AWS::CertificateManager::Certificate KeyAlgorithm = "EC_*"',
+    category: "certificate",
+    severity: "high",
+    confidence: "high",
+    algorithm: "ECDSA",
+    hndl: false,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "CloudFormation provisions an ACM certificate with a classical EC key, forgeable by a quantum attacker.",
+    remediation: "ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205).",
+};
+const RULE_CFN_CLOUDFRONT_TLS = {
+    id: "cfn-cloudfront-legacy-tls",
+    title: "CloudFormation CloudFront legacy TLS",
+    description: 'CloudFront Distribution MinimumProtocolVersion = "TLSv1" / "TLSv1.1"',
+    category: "tls",
+    severity: "medium",
+    confidence: "high",
+    hndl: false,
+    cwe: CWE_WEAK_STRENGTH,
+    message: "CloudFront distribution permits TLS 1.0/1.1, which are deprecated and insecure.",
+    remediation: "Set MinimumProtocolVersion to TLSv1.2_2021 (or later) and prefer PQC-hybrid key exchange.",
+};
+const RULE_CFN_ELB_TLS = {
+    id: "cfn-elb-legacy-tls",
+    title: "CloudFormation ELB/ALB legacy TLS policy",
+    description: "Elastic Load Balancer SslPolicy naming a pre-2017 legacy policy",
+    category: "tls",
+    severity: "medium",
+    confidence: "high",
+    hndl: false,
+    cwe: CWE_WEAK_STRENGTH,
+    message: "Load balancer listener uses a legacy SSL negotiation policy permitting TLS 1.0/1.1.",
+    remediation: "Use ELBSecurityPolicy-TLS13-1-2-2021-06 (or the latest FS+TLS1.2/1.3 policy).",
+};
+const RULE_CFN_ARM_KV_RSA = {
+    id: "cfn-arm-keyvault-rsa",
+    title: "ARM template Key Vault RSA key",
+    description: 'Microsoft.KeyVault key resource kty = "RSA"',
+    category: "kem",
+    severity: "high",
+    confidence: "high",
+    algorithm: "RSA",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "ARM template provisions a classical RSA Azure Key Vault key, which is not quantum-safe.",
+    remediation: "Plan migration to PQC (ML-KEM-768 / ML-DSA-65).",
+};
+const RULE_CFN_ARM_KV_EC = {
+    id: "cfn-arm-keyvault-ec",
+    title: "ARM template Key Vault EC key",
+    description: 'Microsoft.KeyVault key resource kty = "EC"',
+    category: "key-exchange",
+    severity: "high",
+    confidence: "high",
+    algorithm: "ECDH",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "ARM template provisions a classical EC Azure Key Vault key; EC keys feed ECDSA signatures and ECDH key agreement (the ECDH path is harvest-now-decrypt-later exposed).",
+    remediation: "For key agreement: hybrid X25519MLKEM768 (ML-KEM-768). For signatures: ML-DSA-65 (FIPS 204).",
+};
+/**
+ * Detects classical asymmetric crypto and legacy TLS config declared in
+ * AWS CloudFormation / Azure ARM (incl. Bicep-compiled JSON) templates.
+ */
+export const cloudformationDetector = {
+    id: "cloudformation-crypto",
+    description: "Classical asymmetric crypto and legacy TLS config declared in CloudFormation / ARM templates (IaC)",
+    scope: "config",
+    language: "any",
+    rules: [
+        RULE_CFN_KMS_RSA,
+        RULE_CFN_KMS_EC,
+        RULE_CFN_ACM_RSA,
+        RULE_CFN_ACM_EC,
+        RULE_CFN_CLOUDFRONT_TLS,
+        RULE_CFN_ELB_TLS,
+        RULE_CFN_ARM_KV_RSA,
+        RULE_CFN_ARM_KV_EC,
+    ],
+    appliesTo: (f) => hasExtension(f, CFN_EXTENSIONS),
+    detect({ file, content }) {
+        if (!CFN_MARKERS.some((marker) => content.includes(marker)))
+            return [];
+        const findings = [];
+        const add = (re, rule) => eachMatch(re, content, (m) => findings.push(findingFromRule(rule, { file, content, index: m.index, matchLength: m[0].length })));
+        add(RE_CFN_KMS_RSA, RULE_CFN_KMS_RSA);
+        add(RE_CFN_KMS_EC, RULE_CFN_KMS_EC);
+        add(RE_CFN_ACM_RSA, RULE_CFN_ACM_RSA);
+        add(RE_CFN_ACM_EC, RULE_CFN_ACM_EC);
+        add(RE_CFN_CLOUDFRONT_TLS, RULE_CFN_CLOUDFRONT_TLS);
+        add(RE_CFN_ELB_TLS, RULE_CFN_ELB_TLS);
+        add(RE_CFN_ARM_KV_RSA, RULE_CFN_ARM_KV_RSA);
+        add(RE_CFN_ARM_KV_EC, RULE_CFN_ARM_KV_EC);
+        return findings;
+    },
+};
+//# sourceMappingURL=cloudformation.js.map

package/dist/detectors/cloudformation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudformation.js","sourceRoot":"","sources":["../../src/detectors/cloudformation.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEjE,MAAM,cAAc,GAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAErE,+EAA+E;AAC/E,6EAA6E;AAC7E,oEAAoE;AACpE,MAAM,WAAW,GAAsB;IACrC,UAAU;IACV,yBAAyB;IACzB,0BAA0B;IAC1B,wBAAwB;IACxB,oBAAoB;IACpB,aAAa;CACd,CAAC;AAEF,6EAA6E;AAC7E,2EAA2E;AAC3E,uEAAuE;AACvE,0BAA0B;AAC1B,MAAM,cAAc,GAAG,2CAA2C,CAAC;AACnE,MAAM,aAAa,GAAG,kDAAkD,CAAC;AACzE,MAAM,cAAc,GAAG,gDAAgD,CAAC;AACxE,MAAM,aAAa,GAAG,wDAAwD,CAAC;AAC/E,wEAAwE;AACxE,wEAAwE;AACxE,sEAAsE;AACtE,MAAM,qBAAqB,GACzB,4FAA4F,CAAC;AAC/F,yEAAyE;AACzE,MAAM,cAAc,GAClB,yGAAyG,CAAC;AAC5G,8DAA8D;AAC9D,MAAM,iBAAiB,GAAG,yCAAyC,CAAC;AACpE,MAAM,gBAAgB,GAAG,wCAAwC,CAAC;AAElE,MAAM,gBAAgB,GAAa;IACjC,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,4BAA4B;IACnC,WAAW,EAAE,iCAAiC;IAC9C,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,4GAA4G;IAC9G,WAAW,EAAE,oEAAoE;CAClF,CAAC;AACF,MAAM,eAAe,GAAa;IAChC,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,2BAA2B;IAClC,WAAW,EAAE,iCAAiC;IAC9C,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,8JAA8J;IAChK,WAAW,EACT,8FAA8F;CACjG,CAAC;AACF,MAAM,gBAAgB,GAAa;IACjC,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,oCAAoC;IAC3C,WAAW,EAAE,6DAA6D;IAC1E,QAAQ,EAAE,aAAa;IACvB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,mGAAmG;IACrG,WAAW,EAAE,8EAA8E;CAC5F,CAAC;AACF,MAAM,eAAe,GAAa;IAChC,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,mCAAmC;IAC1C,WAAW,EAAE,4DAA4D;IACzE,QAAQ,EAAE,aAAa;IACvB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,wGAAwG;IAC1G,WAAW,EAAE,6CAA6C;CAC3D,CAAC;AACF,MAAM,uBAAuB,GAAa;IACxC,EAAE,EAAE,2BAA2B;IAC/B,KAAK,EAAE,sCAAsC;IAC7C,WAAW,EAAE,sEAAsE;IACnF,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,MAAM;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,iFAAiF;IAC1F,WAAW,EACT,2FAA2F;CAC9F,CAAC;AACF,MAAM,gBAAgB,GAAa;IACjC,EAAE,EAAE,oBAAoB;IACxB,KAAK,EAAE,0CAA0C;IACjD,WAAW,EAAE,iEAAiE;IAC9E,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,MAAM;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,qFAAqF;IAC9F,WAAW,EAAE,+EAA+E;CAC7F,CAAC;AACF,MAAM,mBAAmB,GAAa;IACpC,EAAE,EAAE,sBAAsB;IAC1B,KAAK,EAAE,gCAAgC;IACvC,WAAW,EAAE,6CAA6C;IAC1D,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,yFAAyF;IAC3F,WAAW,EAAE,iDAAiD;CAC/D,CAAC;AACF,MAAM,kBAAkB,GAAa;IACnC,EAAE,EAAE,qBAAqB;IACzB,KAAK,EAAE,+BAA+B;IACtC,WAAW,EAAE,4CAA4C;IACzD,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,wKAAwK;IAC1K,WAAW,EACT,8FAA8F;CACjG,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAa;IAC9C,EAAE,EAAE,uBAAuB;IAC3B,WAAW,EACT,oGAAoG;IACtG,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE;QACL,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,eAAe;QACf,uBAAuB;QACvB,gBAAgB;QAChB,mBAAmB;QACnB,kBAAkB;KACnB;IACD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,cAAc,CAAC;IACjD,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QACtB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAEvE,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,IAAc,EAAE,EAAE,CACzC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3B,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CACnF,CACF,CAAC;QACJ,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACtC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QACpC,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACtC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QACpC,GAAG,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACpD,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACtC,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QAC5C,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAC1C,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC","sourcesContent":["/**\n * IaC detector: classical asymmetric cryptography (and legacy TLS config)\n * declared in AWS CloudFormation / Azure ARM (incl. Bicep-compiled JSON)\n * templates — plus CDK `cdk synth` output, which is plain CloudFormation\n * JSON. This is a distinct surface from `terraform.ts`: CloudFormation/ARM\n * use PascalCase JSON/YAML property names, never Terraform's snake_case HCL\n * attributes, so the two detectors never collide on the same file.\n *\n * Covered:\n *  - AWS::KMS::Key `KeySpec`:                    `\"RSA_…\"` (kem) / `\"ECC_…\"` (key-exchange)\n *  - AWS::CertificateManager::Certificate\n *    `KeyAlgorithm`:                             `\"RSA_…\"` / `\"EC_…\"` (certificate)\n *  - CloudFront distribution `MinimumProtocolVersion`: legacy `TLSv1` / `TLSv1.1` (tls)\n *  - ELB/ALB listener `SslPolicy`:                legacy `ELBSecurityPolicy-2016-08` /\n *                                                 `-TLS-1-0-…` / `-TLS-1-1-…` (tls)\n *  - Azure ARM `Microsoft.KeyVault` key `kty`:    `\"RSA\"` (kem) / `\"EC\"` (key-exchange)\n *\n * `KeySpec` is PascalCase and case-sensitive, so it never matches Terraform's\n * snake_case `customer_master_key_spec` (same underlying AWS API, different\n * authoring surface). A fast-reject on a CFN/ARM marker keeps this detector\n * from ever firing on arbitrary JSON/YAML that happens to contain one of\n * these property names in an unrelated context.\n */\nimport type { Detector, Finding, RuleMeta } from \"../types.js\";\nimport { eachMatch, findingFromRule, hasExtension } from \"../detect-utils.js\";\nimport { CWE_BROKEN_CRYPTO, CWE_WEAK_STRENGTH } from \"../cwe.js\";\n\nconst CFN_EXTENSIONS: readonly string[] = [\".json\", \".yaml\", \".yml\"];\n\n// Fast-reject markers: at least one must appear before any rule regex runs, so\n// this detector never scans arbitrary JSON/YAML that merely happens to share\n// an attribute name (`KeySpec`, `kty`, …) with an unrelated schema.\nconst CFN_MARKERS: readonly string[] = [\n  \"AWS::KMS\",\n  \"AWS::CertificateManager\",\n  \"AWSTemplateFormatVersion\",\n  \"MinimumProtocolVersion\",\n  \"Microsoft.KeyVault\",\n  '\"SslPolicy\"',\n];\n\n// Each attribute is matched with an optional quote around the key and `:` as\n// the separator (both plain-JSON and YAML-block-scalar forms use `:`). The\n// `(?<![\\w\"-])` lookbehind stops a longer/prefixed attribute name from\n// matching on its suffix.\nconst RE_CFN_KMS_RSA = /(?<![\\w\"-])\"?KeySpec\"?\\s*:\\s*\"?RSA_\\d+\"?/g;\nconst RE_CFN_KMS_EC = /(?<![\\w\"-])\"?KeySpec\"?\\s*:\\s*\"?ECC_[A-Z0-9_]+\"?/g;\nconst RE_CFN_ACM_RSA = /(?<![\\w\"-])\"?KeyAlgorithm\"?\\s*:\\s*\"?RSA_\\d+\"?/g;\nconst RE_CFN_ACM_EC = /(?<![\\w\"-])\"?KeyAlgorithm\"?\\s*:\\s*\"?EC_[A-Za-z0-9]+\"?/g;\n// CloudFront: only the pre-2018 \"TLSv1\" / \"TLSv1_2016\" / \"TLSv1.1_2016\"\n// values are legacy; the lookahead delimiter stops this from matching a\n// \"TLSv1.2_2018\"-style value that merely starts with the same prefix.\nconst RE_CFN_CLOUDFRONT_TLS =\n  /(?<![\\w\"-])\"?MinimumProtocolVersion\"?\\s*:\\s*\"?(?:TLSv1(?:\\.1)?_2016|TLSv1)(?=[\"'\\s,}]|$)/gm;\n// ELB/ALB legacy SSL negotiation policies (named, dated policy strings).\nconst RE_CFN_ELB_TLS =\n  /(?<![\\w\"-])\"?SslPolicy\"?\\s*:\\s*\"ELBSecurityPolicy-(?:2016-08|TLS-1-0-\\d{4}-\\d{2}|TLS-1-1-\\d{4}-\\d{2})\"/g;\n// Azure ARM Microsoft.KeyVault key resource `properties.kty`.\nconst RE_CFN_ARM_KV_RSA = /(?<![\\w\"-])\"?kty\"?\\s*:\\s*\"?RSA\"?(?!\\w)/g;\nconst RE_CFN_ARM_KV_EC = /(?<![\\w\"-])\"?kty\"?\\s*:\\s*\"?EC\"?(?!\\w)/g;\n\nconst RULE_CFN_KMS_RSA: RuleMeta = {\n  id: \"cfn-kms-rsa\",\n  title: \"CloudFormation KMS RSA key\",\n  description: 'AWS::KMS::Key KeySpec = \"RSA_*\"',\n  category: \"kem\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"RSA\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"CloudFormation provisions a classical RSA KMS key (harvest-now-decrypt-later exposed for encryption CMKs).\",\n  remediation: \"Plan migration to PQC as cloud KMS adds ML-KEM / ML-DSA key specs.\",\n};\nconst RULE_CFN_KMS_EC: RuleMeta = {\n  id: \"cfn-kms-ec\",\n  title: \"CloudFormation KMS EC key\",\n  description: 'AWS::KMS::Key KeySpec = \"ECC_*\"',\n  category: \"key-exchange\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"ECDH\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"CloudFormation provisions a classical EC KMS key; EC keys feed ECDSA signatures and ECDH key agreement (the ECDH path is harvest-now-decrypt-later exposed).\",\n  remediation:\n    \"For key agreement: hybrid X25519MLKEM768 (ML-KEM-768). For signatures: ML-DSA-65 (FIPS 204).\",\n};\nconst RULE_CFN_ACM_RSA: RuleMeta = {\n  id: \"cfn-acm-rsa\",\n  title: \"CloudFormation ACM RSA certificate\",\n  description: 'AWS::CertificateManager::Certificate KeyAlgorithm = \"RSA_*\"',\n  category: \"certificate\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"RSA\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"CloudFormation provisions an ACM certificate with a classical RSA key, which is not quantum-safe.\",\n  remediation: \"Plan migration to PQC (ML-KEM-768 for encryption, ML-DSA-65 for signatures).\",\n};\nconst RULE_CFN_ACM_EC: RuleMeta = {\n  id: \"cfn-acm-ec\",\n  title: \"CloudFormation ACM EC certificate\",\n  description: 'AWS::CertificateManager::Certificate KeyAlgorithm = \"EC_*\"',\n  category: \"certificate\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"ECDSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"CloudFormation provisions an ACM certificate with a classical EC key, forgeable by a quantum attacker.\",\n  remediation: \"ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205).\",\n};\nconst RULE_CFN_CLOUDFRONT_TLS: RuleMeta = {\n  id: \"cfn-cloudfront-legacy-tls\",\n  title: \"CloudFormation CloudFront legacy TLS\",\n  description: 'CloudFront Distribution MinimumProtocolVersion = \"TLSv1\" / \"TLSv1.1\"',\n  category: \"tls\",\n  severity: \"medium\",\n  confidence: \"high\",\n  hndl: false,\n  cwe: CWE_WEAK_STRENGTH,\n  message: \"CloudFront distribution permits TLS 1.0/1.1, which are deprecated and insecure.\",\n  remediation:\n    \"Set MinimumProtocolVersion to TLSv1.2_2021 (or later) and prefer PQC-hybrid key exchange.\",\n};\nconst RULE_CFN_ELB_TLS: RuleMeta = {\n  id: \"cfn-elb-legacy-tls\",\n  title: \"CloudFormation ELB/ALB legacy TLS policy\",\n  description: \"Elastic Load Balancer SslPolicy naming a pre-2017 legacy policy\",\n  category: \"tls\",\n  severity: \"medium\",\n  confidence: \"high\",\n  hndl: false,\n  cwe: CWE_WEAK_STRENGTH,\n  message: \"Load balancer listener uses a legacy SSL negotiation policy permitting TLS 1.0/1.1.\",\n  remediation: \"Use ELBSecurityPolicy-TLS13-1-2-2021-06 (or the latest FS+TLS1.2/1.3 policy).\",\n};\nconst RULE_CFN_ARM_KV_RSA: RuleMeta = {\n  id: \"cfn-arm-keyvault-rsa\",\n  title: \"ARM template Key Vault RSA key\",\n  description: 'Microsoft.KeyVault key resource kty = \"RSA\"',\n  category: \"kem\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"RSA\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"ARM template provisions a classical RSA Azure Key Vault key, which is not quantum-safe.\",\n  remediation: \"Plan migration to PQC (ML-KEM-768 / ML-DSA-65).\",\n};\nconst RULE_CFN_ARM_KV_EC: RuleMeta = {\n  id: \"cfn-arm-keyvault-ec\",\n  title: \"ARM template Key Vault EC key\",\n  description: 'Microsoft.KeyVault key resource kty = \"EC\"',\n  category: \"key-exchange\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"ECDH\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"ARM template provisions a classical EC Azure Key Vault key; EC keys feed ECDSA signatures and ECDH key agreement (the ECDH path is harvest-now-decrypt-later exposed).\",\n  remediation:\n    \"For key agreement: hybrid X25519MLKEM768 (ML-KEM-768). For signatures: ML-DSA-65 (FIPS 204).\",\n};\n\n/**\n * Detects classical asymmetric crypto and legacy TLS config declared in\n * AWS CloudFormation / Azure ARM (incl. Bicep-compiled JSON) templates.\n */\nexport const cloudformationDetector: Detector = {\n  id: \"cloudformation-crypto\",\n  description:\n    \"Classical asymmetric crypto and legacy TLS config declared in CloudFormation / ARM templates (IaC)\",\n  scope: \"config\",\n  language: \"any\",\n  rules: [\n    RULE_CFN_KMS_RSA,\n    RULE_CFN_KMS_EC,\n    RULE_CFN_ACM_RSA,\n    RULE_CFN_ACM_EC,\n    RULE_CFN_CLOUDFRONT_TLS,\n    RULE_CFN_ELB_TLS,\n    RULE_CFN_ARM_KV_RSA,\n    RULE_CFN_ARM_KV_EC,\n  ],\n  appliesTo: (f) => hasExtension(f, CFN_EXTENSIONS),\n  detect({ file, content }): Finding[] {\n    if (!CFN_MARKERS.some((marker) => content.includes(marker))) return [];\n\n    const findings: Finding[] = [];\n    const add = (re: RegExp, rule: RuleMeta) =>\n      eachMatch(re, content, (m) =>\n        findings.push(\n          findingFromRule(rule, { file, content, index: m.index, matchLength: m[0].length }),\n        ),\n      );\n    add(RE_CFN_KMS_RSA, RULE_CFN_KMS_RSA);\n    add(RE_CFN_KMS_EC, RULE_CFN_KMS_EC);\n    add(RE_CFN_ACM_RSA, RULE_CFN_ACM_RSA);\n    add(RE_CFN_ACM_EC, RULE_CFN_ACM_EC);\n    add(RE_CFN_CLOUDFRONT_TLS, RULE_CFN_CLOUDFRONT_TLS);\n    add(RE_CFN_ELB_TLS, RULE_CFN_ELB_TLS);\n    add(RE_CFN_ARM_KV_RSA, RULE_CFN_ARM_KV_RSA);\n    add(RE_CFN_ARM_KV_EC, RULE_CFN_ARM_KV_EC);\n    return findings;\n  },\n};\n"]}

package/dist/detectors/csharp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"csharp.d.ts","sourceRoot":"","sources":["../../src/detectors/csharp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAC;AA+D/D,gFAAgF;AAChF,eAAO,MAAM,cAAc,EAAE,QAsB5B,CAAC"}
+{"version":3,"file":"csharp.d.ts","sourceRoot":"","sources":["../../src/detectors/csharp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAC;AA8L/D,gFAAgF;AAChF,eAAO,MAAM,cAAc,EAAE,QA8C5B,CAAC"}

package/dist/detectors/csharp.js

@@ -1,9 +1,38 @@
 import { CSHARP_EXTENSIONS, eachMatch, findingFromRule, hasExtension } from "../detect-utils.js";
-import { CWE_BROKEN_CRYPTO } from "../cwe.js";
+import { CWE_BROKEN_CRYPTO, CWE_CERT_VALIDATION, CWE_WEAK_STRENGTH } from "../cwe.js";
 const RE_CS_RSA = /\bRSA\.Create\s*\(|\bnew\s+RSACryptoServiceProvider\s*\(|\bnew\s+RSACng\s*\(|\bnew\s+RSAOpenSsl\s*\(/g;
 const RE_CS_ECDSA = /\bECDsa\.Create\s*\(|\bnew\s+ECDsaCng\s*\(|\bnew\s+ECDsaOpenSsl\s*\(/g;
 const RE_CS_ECDH = /\bECDiffieHellman\.Create\s*\(|\bnew\s+ECDiffieHellmanCng\s*\(|\bnew\s+ECDiffieHellmanOpenSsl\s*\(/g;
 const RE_CS_DSA = /\bDSA\.Create\s*\(|\bnew\s+DSACryptoServiceProvider\s*\(|\bnew\s+DSACng\s*\(/g;
+// Insecure TLS configuration (.NET). Mirrors source.ts's tlsDetector split of a
+// cert-verification-disabled rule (tls-reject-unauthorized) and a legacy-version
+// rule (tls-legacy-version) for the equivalent C# idioms:
+//   - DangerousAcceptAnyServerCertificateValidator / a custom
+//     ServerCertificateCustomValidationCallback → accepts any cert (MITM).
+//   - SslProtocols.Ssl3 / .Tls / .Tls11 → deprecated SSL 3.0 / TLS 1.0 / 1.1.
+// `SslProtocols.Tls` (no suffix) is the legacy TLS 1.0 constant; `Tls12`/`Tls13`
+// are excluded by the trailing \b (the following digit is a word char).
+const RE_CS_TLS_CERT_VALIDATION = /\bDangerousAcceptAnyServerCertificateValidator\b|ServerCertificateCustomValidationCallback\s*=/g;
+const RE_CS_TLS_LEGACY_VERSION = /\bSslProtocols\.(?:Tls|Tls11|Ssl3)\b/g;
+// Identifier-form JWT/JOSE signature algorithms (audit F7). The quoted-string
+// alg token ("RS256") is caught by the language-agnostic jwt-jose detector, but
+// Microsoft.IdentityModel passes the alg as an IDENTIFIER, not a string literal:
+// SecurityAlgorithms.RsaSha256 / SecurityAlgorithms.EcdsaSha256.
+const RE_CS_JWT_ALG = /\bSecurityAlgorithms\.(?:Rsa|Ecdsa)Sha(?:256|384|512)\b/g;
+// BouncyCastle (Org.BouncyCastle) modern-curve and finite-field DH primitives,
+// which System.Security.Cryptography does not expose directly. Each regex is
+// anchored to the distinctive BouncyCastle class names for one family so it
+// can't misfire on unrelated identifiers:
+//   - Ed25519KeyPairGenerator / Ed25519Signer / Ed25519PrivateKeyParameters → EdDSA
+//   - X25519KeyPairGenerator / X25519Agreement / X25519PrivateKeyParameters → X25519
+//   - X448KeyPairGenerator / X448Agreement / X448PrivateKeyParameters → X448
+//   - DHParametersGenerator / DHBasicAgreement / DH(Basic)KeyPairGenerator / DHParameters → DH
+// The trailing \b keeps each token whole (e.g. Ed25519KeyGenerationParameters,
+// X25519PublicKeyParameters and DHKeyGenerationParameters are NOT matched).
+const RE_CS_BC_EDDSA = /\bEd25519(?:KeyPairGenerator|Signer|PrivateKeyParameters)\b/g;
+const RE_CS_BC_X25519 = /\bX25519(?:KeyPairGenerator|Agreement|PrivateKeyParameters)\b/g;
+const RE_CS_BC_X448 = /\bX448(?:KeyPairGenerator|Agreement|PrivateKeyParameters)\b/g;
+const RE_CS_BC_DH = /\bDH(?:ParametersGenerator|BasicAgreement|BasicKeyPairGenerator|KeyPairGenerator|Parameters)\b/g;
 const RULE_CS_RSA = {
     id: "csharp-rsa",
     title: "C# RSA key/usage",
@@ -54,13 +83,111 @@ const RULE_CS_DSA = {
     message: "Classical DSA (.NET) is deprecated and forgeable by a quantum attacker.",
     remediation: "Rotate off DSA and migrate to ML-DSA-65 (FIPS 204).",
 };
+const RULE_CS_TLS_CERT = {
+    id: "csharp-tls-cert-validation",
+    title: "C# TLS certificate verification disabled",
+    description: "DangerousAcceptAnyServerCertificateValidator / ServerCertificateCustomValidationCallback override",
+    category: "tls",
+    severity: "high",
+    confidence: "high",
+    hndl: false,
+    cwe: CWE_CERT_VALIDATION,
+    message: "Accepting any server certificate disables TLS certificate verification (MITM risk).",
+    remediation: "Remove the custom validator and verify certificates properly; prefer PQC-hybrid key exchange.",
+};
+const RULE_CS_TLS_LEGACY = {
+    id: "csharp-tls-legacy-version",
+    title: "C# legacy TLS/SSL version pinned",
+    description: "SslProtocols pinned to Ssl3 / TLS 1.0 / TLS 1.1",
+    category: "tls",
+    severity: "medium",
+    confidence: "high",
+    hndl: false,
+    cwe: CWE_WEAK_STRENGTH,
+    message: "SSL 3.0 / TLS 1.0 / TLS 1.1 are deprecated and insecure; require TLS 1.2+ (prefer 1.3).",
+    remediation: "Use SslProtocols.Tls13 (or Tls12) and prefer PQC-hybrid key exchange.",
+};
+const RULE_CS_JWT_ALG = {
+    id: "csharp-jwt-alg",
+    title: "C# identifier-form JWT/JOSE algorithm",
+    description: "Microsoft.IdentityModel SecurityAlgorithms.RsaSha* / EcdsaSha*",
+    category: "signature",
+    severity: "high",
+    confidence: "high",
+    algorithm: "unknown",
+    hndl: false,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "A classical JWT/JOSE signature algorithm (.NET, identifier form) is used, forgeable by a quantum attacker.",
+    remediation: "ML-DSA-65 (FIPS 204); track IETF PQC JOSE/COSE algorithms",
+};
+const RULE_CS_BC_EDDSA = {
+    id: "csharp-bouncycastle-eddsa",
+    title: "C# Ed25519 signature (BouncyCastle)",
+    description: "Org.BouncyCastle Ed25519KeyPairGenerator / Ed25519Signer / Ed25519PrivateKeyParameters",
+    category: "signature",
+    severity: "high",
+    confidence: "high",
+    algorithm: "EdDSA",
+    hndl: false,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "Classical Ed25519 signing (BouncyCastle) is forgeable by a quantum attacker.",
+    remediation: "ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205)",
+};
+const RULE_CS_BC_X25519 = {
+    id: "csharp-bouncycastle-x25519",
+    title: "C# X25519 key agreement (BouncyCastle)",
+    description: "Org.BouncyCastle X25519KeyPairGenerator / X25519Agreement / X25519PrivateKeyParameters",
+    category: "key-exchange",
+    severity: "high",
+    confidence: "high",
+    algorithm: "X25519",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "X25519 Diffie-Hellman key agreement (BouncyCastle) is broken by Shor's algorithm (harvest-now-decrypt-later).",
+};
+const RULE_CS_BC_X448 = {
+    id: "csharp-bouncycastle-x448",
+    title: "C# X448 key agreement (BouncyCastle)",
+    description: "Org.BouncyCastle X448KeyPairGenerator / X448Agreement / X448PrivateKeyParameters",
+    category: "key-exchange",
+    severity: "high",
+    confidence: "high",
+    algorithm: "X448",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "X448 Diffie-Hellman key agreement (BouncyCastle) is broken by Shor's algorithm (harvest-now-decrypt-later).",
+};
+const RULE_CS_BC_DH = {
+    id: "csharp-bouncycastle-dh",
+    title: "C# finite-field Diffie-Hellman (BouncyCastle)",
+    description: "Org.BouncyCastle DHParametersGenerator / DHBasicAgreement / DHKeyPairGenerator / DHParameters",
+    category: "key-exchange",
+    severity: "high",
+    confidence: "high",
+    algorithm: "DH",
+    hndl: true,
+    cwe: CWE_BROKEN_CRYPTO,
+    message: "Finite-field Diffie-Hellman (BouncyCastle) is broken by Shor's algorithm (harvest-now-decrypt-later).",
+};
 /** Detects classical asymmetric crypto in C# (System.Security.Cryptography). */
 export const csharpDetector = {
     id: "csharp-crypto",
-    description: "Classical asymmetric crypto in C#/.NET (System.Security.Cryptography)",
+    description: "Classical asymmetric crypto (System.Security.Cryptography) and insecure TLS config in C#/.NET",
     scope: "source",
     language: "csharp",
-    rules: [RULE_CS_RSA, RULE_CS_ECDSA, RULE_CS_ECDH, RULE_CS_DSA],
+    rules: [
+        RULE_CS_RSA,
+        RULE_CS_ECDSA,
+        RULE_CS_ECDH,
+        RULE_CS_DSA,
+        RULE_CS_TLS_CERT,
+        RULE_CS_TLS_LEGACY,
+        RULE_CS_JWT_ALG,
+        RULE_CS_BC_EDDSA,
+        RULE_CS_BC_X25519,
+        RULE_CS_BC_X448,
+        RULE_CS_BC_DH,
+    ],
     appliesTo: (f) => hasExtension(f, CSHARP_EXTENSIONS),
     detect({ file, content }) {
         const findings = [];
@@ -70,6 +197,17 @@ export const csharpDetector = {
         add(RE_CS_ECDH, RULE_CS_ECDH);
         add(RE_CS_RSA, RULE_CS_RSA);
         add(RE_CS_DSA, RULE_CS_DSA);
+        // Insecure TLS configuration (disjoint from the crypto factories above).
+        add(RE_CS_TLS_CERT_VALIDATION, RULE_CS_TLS_CERT);
+        add(RE_CS_TLS_LEGACY_VERSION, RULE_CS_TLS_LEGACY);
+        // Identifier-form JWT/JOSE signature algorithms (Microsoft.IdentityModel).
+        add(RE_CS_JWT_ALG, RULE_CS_JWT_ALG);
+        // BouncyCastle (Org.BouncyCastle) curve / finite-field DH primitives that
+        // System.Security.Cryptography does not expose directly.
+        add(RE_CS_BC_EDDSA, RULE_CS_BC_EDDSA);
+        add(RE_CS_BC_X25519, RULE_CS_BC_X25519);
+        add(RE_CS_BC_X448, RULE_CS_BC_X448);
+        add(RE_CS_BC_DH, RULE_CS_BC_DH);
         return findings;
     },
 };

package/dist/detectors/csharp.js.map

@@ -1 +1 @@
-{"version":3,"file":"csharp.js","sourceRoot":"","sources":["../../src/detectors/csharp.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,SAAS,GACb,uGAAuG,CAAC;AAC1G,MAAM,WAAW,GAAG,uEAAuE,CAAC;AAC5F,MAAM,UAAU,GACd,qGAAqG,CAAC;AACxG,MAAM,SAAS,GAAG,+EAA+E,CAAC;AAElG,MAAM,WAAW,GAAa;IAC5B,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,kBAAkB;IACzB,WAAW,EAAE,6EAA6E;IAC1F,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,8EAA8E;CACxF,CAAC;AACF,MAAM,aAAa,GAAa;IAC9B,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EAAE,sDAAsD;IACnE,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,oEAAoE;IAC7E,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,YAAY,GAAa;IAC7B,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EAAE,0EAA0E;IACvF,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,iGAAiG;CACpG,CAAC;AACF,MAAM,WAAW,GAAa;IAC5B,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,oEAAoE;IACjF,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,yEAAyE;IAClF,WAAW,EAAE,qDAAqD;CACnE,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAa;IACtC,EAAE,EAAE,eAAe;IACnB,WAAW,EAAE,uEAAuE;IACpF,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,CAAC;IAC9D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,iBAAiB,CAAC;IACpD,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,IAAc,EAAE,EAAE,CACzC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3B,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CACnF,CACF,CAAC;QACJ,gEAAgE;QAChE,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAChC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9B,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5B,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5B,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}
+{"version":3,"file":"csharp.js","sourceRoot":"","sources":["../../src/detectors/csharp.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEtF,MAAM,SAAS,GACb,uGAAuG,CAAC;AAC1G,MAAM,WAAW,GAAG,uEAAuE,CAAC;AAC5F,MAAM,UAAU,GACd,qGAAqG,CAAC;AACxG,MAAM,SAAS,GAAG,+EAA+E,CAAC;AAClG,gFAAgF;AAChF,iFAAiF;AACjF,0DAA0D;AAC1D,8DAA8D;AAC9D,2EAA2E;AAC3E,8EAA8E;AAC9E,iFAAiF;AACjF,wEAAwE;AACxE,MAAM,yBAAyB,GAC7B,iGAAiG,CAAC;AACpG,MAAM,wBAAwB,GAAG,uCAAuC,CAAC;AACzE,8EAA8E;AAC9E,gFAAgF;AAChF,iFAAiF;AACjF,iEAAiE;AACjE,MAAM,aAAa,GAAG,0DAA0D,CAAC;AACjF,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,0CAA0C;AAC1C,oFAAoF;AACpF,qFAAqF;AACrF,6EAA6E;AAC7E,+FAA+F;AAC/F,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,cAAc,GAAG,8DAA8D,CAAC;AACtF,MAAM,eAAe,GAAG,gEAAgE,CAAC;AACzF,MAAM,aAAa,GAAG,8DAA8D,CAAC;AACrF,MAAM,WAAW,GACf,iGAAiG,CAAC;AAEpG,MAAM,WAAW,GAAa;IAC5B,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,kBAAkB;IACzB,WAAW,EAAE,6EAA6E;IAC1F,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,8EAA8E;CACxF,CAAC;AACF,MAAM,aAAa,GAAa;IAC9B,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EAAE,sDAAsD;IACnE,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,oEAAoE;IAC7E,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,YAAY,GAAa;IAC7B,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EAAE,0EAA0E;IACvF,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,iGAAiG;CACpG,CAAC;AACF,MAAM,WAAW,GAAa;IAC5B,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,oEAAoE;IACjF,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,yEAAyE;IAClF,WAAW,EAAE,qDAAqD;CACnE,CAAC;AACF,MAAM,gBAAgB,GAAa;IACjC,EAAE,EAAE,4BAA4B;IAChC,KAAK,EAAE,0CAA0C;IACjD,WAAW,EACT,mGAAmG;IACrG,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,mBAAmB;IACxB,OAAO,EAAE,qFAAqF;IAC9F,WAAW,EACT,+FAA+F;CAClG,CAAC;AACF,MAAM,kBAAkB,GAAa;IACnC,EAAE,EAAE,2BAA2B;IAC/B,KAAK,EAAE,kCAAkC;IACzC,WAAW,EAAE,iDAAiD;IAC9D,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,MAAM;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,yFAAyF;IAC3F,WAAW,EAAE,uEAAuE;CACrF,CAAC;AACF,MAAM,eAAe,GAAa;IAChC,EAAE,EAAE,gBAAgB;IACpB,KAAK,EAAE,uCAAuC;IAC9C,WAAW,EAAE,gEAAgE;IAC7E,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,4GAA4G;IAC9G,WAAW,EAAE,2DAA2D;CACzE,CAAC;AACF,MAAM,gBAAgB,GAAa;IACjC,EAAE,EAAE,2BAA2B;IAC/B,KAAK,EAAE,qCAAqC;IAC5C,WAAW,EACT,wFAAwF;IAC1F,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,iBAAiB;IACtB,OAAO,EAAE,8EAA8E;IACvF,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AACF,MAAM,iBAAiB,GAAa;IAClC,EAAE,EAAE,4BAA4B;IAChC,KAAK,EAAE,wCAAwC;IAC/C,WAAW,EACT,wFAAwF;IAC1F,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,QAAQ;IACnB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,+GAA+G;CAClH,CAAC;AACF,MAAM,eAAe,GAAa;IAChC,EAAE,EAAE,0BAA0B;IAC9B,KAAK,EAAE,sCAAsC;IAC7C,WAAW,EAAE,kFAAkF;IAC/F,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,6GAA6G;CAChH,CAAC;AACF,MAAM,aAAa,GAAa;IAC9B,EAAE,EAAE,wBAAwB;IAC5B,KAAK,EAAE,+CAA+C;IACtD,WAAW,EACT,+FAA+F;IACjG,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,IAAI;IACf,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iBAAiB;IACtB,OAAO,EACL,uGAAuG;CAC1G,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAa;IACtC,EAAE,EAAE,eAAe;IACnB,WAAW,EACT,+FAA+F;IACjG,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE;QACL,WAAW;QACX,aAAa;QACb,YAAY;QACZ,WAAW;QACX,gBAAgB;QAChB,kBAAkB;QAClB,eAAe;QACf,gBAAgB;QAChB,iBAAiB;QACjB,eAAe;QACf,aAAa;KACd;IACD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,iBAAiB,CAAC;IACpD,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,IAAc,EAAE,EAAE,CACzC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3B,QAAQ,CAAC,IAAI,CACX,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CACnF,CACF,CAAC;QACJ,gEAAgE;QAChE,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAChC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9B,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5B,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5B,yEAAyE;QACzE,GAAG,CAAC,yBAAyB,EAAE,gBAAgB,CAAC,CAAC;QACjD,GAAG,CAAC,wBAAwB,EAAE,kBAAkB,CAAC,CAAC;QAClD,2EAA2E;QAC3E,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QACpC,0EAA0E;QAC1E,yDAAyD;QACzD,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACtC,GAAG,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;QACxC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QACpC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAChC,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC","sourcesContent":["/**\n * Source-code detector for classical asymmetric cryptography in C# / .NET\n * (`System.Security.Cryptography`). Same lexical strategy as the other packs.\n * .NET exposes each algorithm through a factory (`RSA.Create()`,\n * `ECDsa.Create()`, `ECDiffieHellman.Create()`) or a concrete CSP/CNG class\n * (`RSACryptoServiceProvider`, `ECDsaCng`, …), all of which are precise signals.\n *\n * HNDL: RSA (keygen/encryption) and (EC)DH key agreement are harvest-now-\n * decrypt-later exposed (hndl:true); ECDSA/DSA signatures are hndl:false but\n * forgeable by a quantum attacker.\n */\nimport type { Detector, Finding, RuleMeta } from \"../types.js\";\nimport { CSHARP_EXTENSIONS, eachMatch, findingFromRule, hasExtension } from \"../detect-utils.js\";\nimport { CWE_BROKEN_CRYPTO, CWE_CERT_VALIDATION, CWE_WEAK_STRENGTH } from \"../cwe.js\";\n\nconst RE_CS_RSA =\n  /\\bRSA\\.Create\\s*\\(|\\bnew\\s+RSACryptoServiceProvider\\s*\\(|\\bnew\\s+RSACng\\s*\\(|\\bnew\\s+RSAOpenSsl\\s*\\(/g;\nconst RE_CS_ECDSA = /\\bECDsa\\.Create\\s*\\(|\\bnew\\s+ECDsaCng\\s*\\(|\\bnew\\s+ECDsaOpenSsl\\s*\\(/g;\nconst RE_CS_ECDH =\n  /\\bECDiffieHellman\\.Create\\s*\\(|\\bnew\\s+ECDiffieHellmanCng\\s*\\(|\\bnew\\s+ECDiffieHellmanOpenSsl\\s*\\(/g;\nconst RE_CS_DSA = /\\bDSA\\.Create\\s*\\(|\\bnew\\s+DSACryptoServiceProvider\\s*\\(|\\bnew\\s+DSACng\\s*\\(/g;\n// Insecure TLS configuration (.NET). Mirrors source.ts's tlsDetector split of a\n// cert-verification-disabled rule (tls-reject-unauthorized) and a legacy-version\n// rule (tls-legacy-version) for the equivalent C# idioms:\n//   - DangerousAcceptAnyServerCertificateValidator / a custom\n//     ServerCertificateCustomValidationCallback → accepts any cert (MITM).\n//   - SslProtocols.Ssl3 / .Tls / .Tls11 → deprecated SSL 3.0 / TLS 1.0 / 1.1.\n// `SslProtocols.Tls` (no suffix) is the legacy TLS 1.0 constant; `Tls12`/`Tls13`\n// are excluded by the trailing \\b (the following digit is a word char).\nconst RE_CS_TLS_CERT_VALIDATION =\n  /\\bDangerousAcceptAnyServerCertificateValidator\\b|ServerCertificateCustomValidationCallback\\s*=/g;\nconst RE_CS_TLS_LEGACY_VERSION = /\\bSslProtocols\\.(?:Tls|Tls11|Ssl3)\\b/g;\n// Identifier-form JWT/JOSE signature algorithms (audit F7). The quoted-string\n// alg token (\"RS256\") is caught by the language-agnostic jwt-jose detector, but\n// Microsoft.IdentityModel passes the alg as an IDENTIFIER, not a string literal:\n// SecurityAlgorithms.RsaSha256 / SecurityAlgorithms.EcdsaSha256.\nconst RE_CS_JWT_ALG = /\\bSecurityAlgorithms\\.(?:Rsa|Ecdsa)Sha(?:256|384|512)\\b/g;\n// BouncyCastle (Org.BouncyCastle) modern-curve and finite-field DH primitives,\n// which System.Security.Cryptography does not expose directly. Each regex is\n// anchored to the distinctive BouncyCastle class names for one family so it\n// can't misfire on unrelated identifiers:\n//   - Ed25519KeyPairGenerator / Ed25519Signer / Ed25519PrivateKeyParameters → EdDSA\n//   - X25519KeyPairGenerator / X25519Agreement / X25519PrivateKeyParameters → X25519\n//   - X448KeyPairGenerator / X448Agreement / X448PrivateKeyParameters → X448\n//   - DHParametersGenerator / DHBasicAgreement / DH(Basic)KeyPairGenerator / DHParameters → DH\n// The trailing \\b keeps each token whole (e.g. Ed25519KeyGenerationParameters,\n// X25519PublicKeyParameters and DHKeyGenerationParameters are NOT matched).\nconst RE_CS_BC_EDDSA = /\\bEd25519(?:KeyPairGenerator|Signer|PrivateKeyParameters)\\b/g;\nconst RE_CS_BC_X25519 = /\\bX25519(?:KeyPairGenerator|Agreement|PrivateKeyParameters)\\b/g;\nconst RE_CS_BC_X448 = /\\bX448(?:KeyPairGenerator|Agreement|PrivateKeyParameters)\\b/g;\nconst RE_CS_BC_DH =\n  /\\bDH(?:ParametersGenerator|BasicAgreement|BasicKeyPairGenerator|KeyPairGenerator|Parameters)\\b/g;\n\nconst RULE_CS_RSA: RuleMeta = {\n  id: \"csharp-rsa\",\n  title: \"C# RSA key/usage\",\n  description: \"System.Security.Cryptography RSA.Create / RSACryptoServiceProvider / RSACng\",\n  category: \"kem\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"RSA\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Classical RSA (.NET) is not quantum-safe and RSA encryption is HNDL-exposed.\",\n};\nconst RULE_CS_ECDSA: RuleMeta = {\n  id: \"csharp-ecdsa\",\n  title: \"C# ECDSA signature\",\n  description: \"System.Security.Cryptography ECDsa.Create / ECDsaCng\",\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"ECDSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Classical ECDSA signing (.NET) is forgeable by a quantum attacker.\",\n  remediation: \"ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205)\",\n};\nconst RULE_CS_ECDH: RuleMeta = {\n  id: \"csharp-ecdh\",\n  title: \"C# ECDH key agreement\",\n  description: \"System.Security.Cryptography ECDiffieHellman.Create / ECDiffieHellmanCng\",\n  category: \"key-exchange\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"ECDH\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"Elliptic-curve Diffie-Hellman (.NET) is broken by Shor's algorithm (harvest-now-decrypt-later).\",\n};\nconst RULE_CS_DSA: RuleMeta = {\n  id: \"csharp-dsa\",\n  title: \"C# DSA key/signature\",\n  description: \"System.Security.Cryptography DSA.Create / DSACryptoServiceProvider\",\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"DSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Classical DSA (.NET) is deprecated and forgeable by a quantum attacker.\",\n  remediation: \"Rotate off DSA and migrate to ML-DSA-65 (FIPS 204).\",\n};\nconst RULE_CS_TLS_CERT: RuleMeta = {\n  id: \"csharp-tls-cert-validation\",\n  title: \"C# TLS certificate verification disabled\",\n  description:\n    \"DangerousAcceptAnyServerCertificateValidator / ServerCertificateCustomValidationCallback override\",\n  category: \"tls\",\n  severity: \"high\",\n  confidence: \"high\",\n  hndl: false,\n  cwe: CWE_CERT_VALIDATION,\n  message: \"Accepting any server certificate disables TLS certificate verification (MITM risk).\",\n  remediation:\n    \"Remove the custom validator and verify certificates properly; prefer PQC-hybrid key exchange.\",\n};\nconst RULE_CS_TLS_LEGACY: RuleMeta = {\n  id: \"csharp-tls-legacy-version\",\n  title: \"C# legacy TLS/SSL version pinned\",\n  description: \"SslProtocols pinned to Ssl3 / TLS 1.0 / TLS 1.1\",\n  category: \"tls\",\n  severity: \"medium\",\n  confidence: \"high\",\n  hndl: false,\n  cwe: CWE_WEAK_STRENGTH,\n  message:\n    \"SSL 3.0 / TLS 1.0 / TLS 1.1 are deprecated and insecure; require TLS 1.2+ (prefer 1.3).\",\n  remediation: \"Use SslProtocols.Tls13 (or Tls12) and prefer PQC-hybrid key exchange.\",\n};\nconst RULE_CS_JWT_ALG: RuleMeta = {\n  id: \"csharp-jwt-alg\",\n  title: \"C# identifier-form JWT/JOSE algorithm\",\n  description: \"Microsoft.IdentityModel SecurityAlgorithms.RsaSha* / EcdsaSha*\",\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"unknown\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"A classical JWT/JOSE signature algorithm (.NET, identifier form) is used, forgeable by a quantum attacker.\",\n  remediation: \"ML-DSA-65 (FIPS 204); track IETF PQC JOSE/COSE algorithms\",\n};\nconst RULE_CS_BC_EDDSA: RuleMeta = {\n  id: \"csharp-bouncycastle-eddsa\",\n  title: \"C# Ed25519 signature (BouncyCastle)\",\n  description:\n    \"Org.BouncyCastle Ed25519KeyPairGenerator / Ed25519Signer / Ed25519PrivateKeyParameters\",\n  category: \"signature\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"EdDSA\",\n  hndl: false,\n  cwe: CWE_BROKEN_CRYPTO,\n  message: \"Classical Ed25519 signing (BouncyCastle) is forgeable by a quantum attacker.\",\n  remediation: \"ML-DSA-65 (FIPS 204) or SLH-DSA (FIPS 205)\",\n};\nconst RULE_CS_BC_X25519: RuleMeta = {\n  id: \"csharp-bouncycastle-x25519\",\n  title: \"C# X25519 key agreement (BouncyCastle)\",\n  description:\n    \"Org.BouncyCastle X25519KeyPairGenerator / X25519Agreement / X25519PrivateKeyParameters\",\n  category: \"key-exchange\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"X25519\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"X25519 Diffie-Hellman key agreement (BouncyCastle) is broken by Shor's algorithm (harvest-now-decrypt-later).\",\n};\nconst RULE_CS_BC_X448: RuleMeta = {\n  id: \"csharp-bouncycastle-x448\",\n  title: \"C# X448 key agreement (BouncyCastle)\",\n  description: \"Org.BouncyCastle X448KeyPairGenerator / X448Agreement / X448PrivateKeyParameters\",\n  category: \"key-exchange\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"X448\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"X448 Diffie-Hellman key agreement (BouncyCastle) is broken by Shor's algorithm (harvest-now-decrypt-later).\",\n};\nconst RULE_CS_BC_DH: RuleMeta = {\n  id: \"csharp-bouncycastle-dh\",\n  title: \"C# finite-field Diffie-Hellman (BouncyCastle)\",\n  description:\n    \"Org.BouncyCastle DHParametersGenerator / DHBasicAgreement / DHKeyPairGenerator / DHParameters\",\n  category: \"key-exchange\",\n  severity: \"high\",\n  confidence: \"high\",\n  algorithm: \"DH\",\n  hndl: true,\n  cwe: CWE_BROKEN_CRYPTO,\n  message:\n    \"Finite-field Diffie-Hellman (BouncyCastle) is broken by Shor's algorithm (harvest-now-decrypt-later).\",\n};\n\n/** Detects classical asymmetric crypto in C# (System.Security.Cryptography). */\nexport const csharpDetector: Detector = {\n  id: \"csharp-crypto\",\n  description:\n    \"Classical asymmetric crypto (System.Security.Cryptography) and insecure TLS config in C#/.NET\",\n  scope: \"source\",\n  language: \"csharp\",\n  rules: [\n    RULE_CS_RSA,\n    RULE_CS_ECDSA,\n    RULE_CS_ECDH,\n    RULE_CS_DSA,\n    RULE_CS_TLS_CERT,\n    RULE_CS_TLS_LEGACY,\n    RULE_CS_JWT_ALG,\n    RULE_CS_BC_EDDSA,\n    RULE_CS_BC_X25519,\n    RULE_CS_BC_X448,\n    RULE_CS_BC_DH,\n  ],\n  appliesTo: (f) => hasExtension(f, CSHARP_EXTENSIONS),\n  detect({ file, content }): Finding[] {\n    const findings: Finding[] = [];\n    const add = (re: RegExp, rule: RuleMeta) =>\n      eachMatch(re, content, (m) =>\n        findings.push(\n          findingFromRule(rule, { file, content, index: m.index, matchLength: m[0].length }),\n        ),\n      );\n    // ECDSA / ECDH before RSA/DSA so the specific EC factories win.\n    add(RE_CS_ECDSA, RULE_CS_ECDSA);\n    add(RE_CS_ECDH, RULE_CS_ECDH);\n    add(RE_CS_RSA, RULE_CS_RSA);\n    add(RE_CS_DSA, RULE_CS_DSA);\n    // Insecure TLS configuration (disjoint from the crypto factories above).\n    add(RE_CS_TLS_CERT_VALIDATION, RULE_CS_TLS_CERT);\n    add(RE_CS_TLS_LEGACY_VERSION, RULE_CS_TLS_LEGACY);\n    // Identifier-form JWT/JOSE signature algorithms (Microsoft.IdentityModel).\n    add(RE_CS_JWT_ALG, RULE_CS_JWT_ALG);\n    // BouncyCastle (Org.BouncyCastle) curve / finite-field DH primitives that\n    // System.Security.Cryptography does not expose directly.\n    add(RE_CS_BC_EDDSA, RULE_CS_BC_EDDSA);\n    add(RE_CS_BC_X25519, RULE_CS_BC_X25519);\n    add(RE_CS_BC_X448, RULE_CS_BC_X448);\n    add(RE_CS_BC_DH, RULE_CS_BC_DH);\n    return findings;\n  },\n};\n"]}

package/dist/detectors/database.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Config detector: classical crypto in database usage — public-key encryption of
+ * stored data (pgcrypto) and weak client TLS posture. Data-at-rest is the sharpest
+ * harvest-now-decrypt-later target: a column encrypted to an RSA key today is a
+ * time capsule an adversary can hold until key recovery is cheap.
+ *
+ * Covered:
+ *  - pgcrypto `pgp_pub_encrypt` / `pgp_pub_decrypt` in `.sql` (RSA/ElGamal public-key
+ *    encryption of column data) → `hndl:true`.
+ *  - libpq `sslmode = disable | allow | prefer | require` in any config/connection
+ *    file — a mode that does NOT verify the server certificate, so the classical
+ *    TLS session it does (or doesn't) negotiate is both MITM-able and harvestable.
+ */
+import type { Detector } from "../types.js";
+/** Detects classical database at-rest / transport crypto. */
+export declare const databaseDetector: Detector;
+//# sourceMappingURL=database.d.ts.map

package/dist/detectors/database.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/detectors/database.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAC;AAqC/D,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,EAAE,QAoC9B,CAAC"}