Skip to content

A pluggable type system for Java to find unpermitted algorithms or providers at compile time.

License

Notifications You must be signed in to change notification settings

vehiloco/crypto-checker

Repository files navigation

Crypto Checker

Build Status

The Crypto Checker is a pluggable type system built on the Checker Framework. It can help you find whether there are any weak or unsupported crypto algorithms and the unsupported algorithm providers being used in your program. If the Crypto Checker issues no warnings for a given program, then you have a guarantee that your program at runtime will never have these issues.

The Crypto Checker aims to be sound, which means that a false positive may be reported if your code is too complicated for it to understand. In this case, the Crypto Checker also helps you improve your code style.

See vehiloco.github.io/crypto-checker/ for more information.

Development notes

When updating the Checker Framework version, make sure to use the same version across all build.gradle files.

Run ./gradlew :spotlessApply to reformat the source code.

About

A pluggable type system for Java to find unpermitted algorithms or providers at compile time.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published