From ba482e94473648ebae113038aa8872d4a85f0e32 Mon Sep 17 00:00:00 2001 From: Rakshit Krishnappa Ravi Date: Fri, 14 Feb 2020 19:02:08 +0100 Subject: [PATCH] Added changes proposed by Rodrigo Signed-off-by: Rakshit Krishnappa Ravi --- content/documentation/crysl/_index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/documentation/crysl/_index.md b/content/documentation/crysl/_index.md index 126d8eb..1d1b331 100644 --- a/content/documentation/crysl/_index.md +++ b/content/documentation/crysl/_index.md @@ -77,9 +77,9 @@ ENSURES Above is an excerpt of the rule for `SecretKeySpec`. The predicate `generatedKey` is listed within the `ENSURES` block of this rule. The static analysis labels any object of type `SecretKeySpec` by `generatedKey` when the analysis finds the object to be used correctly (with respect to its *CrySL* rule). ## Addition or Modification of CrySL Rules -All *CrySL* rules currently used by CogniCrypt are present in the repository named [Crypto-API-Rules](https://github.com/CROSSINGTUD/Crypto-API-Rules). As of June 2019, it contains three project, one each for the APIs of Java Cryptography Architecture, Google Tink, and BouncyCastle through its lightweight API. You need to clone the corresponding project and import it as a maven project into Eclipse where you have already installed CogniCrypt and the *CrySL* plugins. These plugins let you update the *CrySL* rules on the fly. You can edit them or even add new rules. CogniCrypt automatically parses these rules and takes them into account in any future analyses. +All *CrySL* rules currently used by CogniCrypt are present in the repository named [Crypto-API-Rules](https://github.com/CROSSINGTUD/Crypto-API-Rules). As of June 2019, it contains three project[s], each one with CrySL specifications for Java Cryptography Architecture, Google Tink, and BouncyCastle through its lightweight API. You need to clone the corresponding project and import it as a maven project into Eclipse where you have already installed CogniCrypt and the *CrySL* plugins. These plugins let you update the *CrySL* rules on the fly. You can edit them or even add new rules. CogniCrypt automatically parses these rules and takes them into account in any future analyses. -The below tutorial describes how to modify *CrySL* rules on the fly. The first screenshot shows an example code which uses `KeyGenerator` that is created with correct algorithm, namely "AES", and later initialized with a proper keySize i.e. 128. Hence the plugin doesn't show any error markers. +The following tutorial describes how to modify *CrySL* rules on the fly. The first screenshot shows an example code which uses `KeyGenerator` that is created with correct algorithm, namely "AES", and later initialized with a proper keySize i.e. 128. Hence the plugin doesn't show any error markers.
An example code without any misuse