diff options
| author | Petr Svenda | 2020-10-15 08:49:50 +0200 |
|---|---|---|
| committer | Petr Svenda | 2020-10-15 08:49:50 +0200 |
| commit | 73f76bf3511390448cffae59dd7a3fad60511b1e (patch) | |
| tree | a058675ef71fcc1669dcbba9172d961ee88dcd97 /src | |
| parent | de99cbdeb25da11ebbc4f46259d3e88f4e409190 (diff) | |
| download | sec-certs-73f76bf3511390448cffae59dd7a3fad60511b1e.tar.gz sec-certs-73f76bf3511390448cffae59dd7a3fad60511b1e.tar.zst sec-certs-73f76bf3511390448cffae59dd7a3fad60511b1e.zip | |
add new rules for PP
Diffstat (limited to 'src')
| -rw-r--r-- | src/cert_rules.py | 29 |
1 files changed, 25 insertions, 4 deletions
diff --git a/src/cert_rules.py b/src/cert_rules.py index 66854f96..28e232ae 100644 --- a/src/cert_rules.py +++ b/src/cert_rules.py @@ -77,8 +77,9 @@ rules_os = [ ] rules_standard_id = [ - 'FIPS[0-9]+-[0-9]+?', - 'FIPS[0-9]+?', + 'FIPS ?(?:PUB )?[0-9]+-[0-9]+?', + 'FIPS ?(?:PUB )?[0-9]+?', + 'NIST SP [0-9]+-[0-9]+?[a-zA-Z]?', 'PKCS[ #]*[1-9]+', 'TLS[ ]*v[0-9\.]+', 'TLS[ ]*v[0-9\.]+', @@ -90,6 +91,7 @@ rules_standard_id = [ 'ISO/IEC[ ]*[0-9]+', 'ICAO(?:-SAC|)', '[Xx]\.509', + 'RFC [0-9]+' ] rules_security_level = [ @@ -151,9 +153,15 @@ rules_crypto_algs = [ 'ECC', 'DTRNG', 'TRNG', - 'RNG', + 'RN[GD]', + 'RBG', ] +rules_block_cipher_modes = [ + 'ECB', + 'CBC' +] + rules_ecc_curves = [ 'P-(?:192|224|256|384|521)', 'brainpool.+?[rkt]+1', @@ -184,9 +192,20 @@ rules_crypto_libs = [ 'v1.02.013' # Infineon's ROCA-vulnerable library ] - +rules_IC_data_groups = [ + 'EF\.DG[1-9][0-6]?', + 'EF\.COM', + 'EF\.CardAccess', + 'EF\.SOD', + 'EF\.ChipSecurity' +] rules_defenses = [ + '[Mm]alfunction', + 'Leak-Inherent', + '[Pp]hysical [Pp]robing', + '[pP]hysical [tT]ampering', + '[Ss]ide.channels?', 'SPA', 'DPA', 'DFA', @@ -227,10 +246,12 @@ rules['rules_security_assurance_components'] = rules_security_assurance_componen rules['rules_security_functional_components'] = rules_security_functional_components rules['rules_javacard'] = rules_javacard rules['rules_crypto_algs'] = rules_crypto_algs +rules['block_cipher_modes'] = rules_block_cipher_modes rules['rules_ecc_curves'] = rules_ecc_curves rules['rules_cplc'] = rules_cplc rules['rules_crypto_engines'] = rules_crypto_engines rules['rules_crypto_libs'] = rules_crypto_libs +rules['rules_IC_data_groups'] = rules_IC_data_groups rules['rules_defenses'] = rules_defenses rules['rules_certification_process'] = rules_certification_process rules['rules_vulnerabilities'] = rules_vulnerabilities |