public class StaticIvDetector extends Object implements edu.umd.cs.findbugs.Detector
The main goal of the this detector is to find encryption being done with static initialization vector (IV). By design, the IV should be change for every message encrypt by a system.
The strategy to find those occurrences is not to backtrack to find the potential source of the bytes being passed. It will not be trigger if SecureRandom instance is use. Therefor, it is very likely to trigger false positive if the encryption is separate from the IV generation.
| Constructor and Description |
|---|
StaticIvDetector(edu.umd.cs.findbugs.BugReporter bugReporter) |
| Modifier and Type | Method and Description |
|---|---|
void |
report() |
void |
visitClassContext(edu.umd.cs.findbugs.ba.ClassContext classContext) |
Copyright © 2017. All rights reserved.