anya-core 1.2.0

Enterprise-grade Bitcoin Infrastructure Platform
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52

# Cryptographic Algorithm Validation Suite
# [AIS-3][AIR-3][BPC-3]

# Import core cryptography query packs
- import: codeql-suites/javascript-security-extended.qls
  from: codeql-javascript
- import: codeql-suites/rust-security-and-quality.qls
  from: codeql-rust

# Core cryptographic algorithm validation
- description: "Cryptographic Algorithm Security"
  queries:
    - include:
        id: js/weak-cryptographic-algorithm
        tags:
          - security
          - cryptography
    - include:
        id: js/insecure-hash-algorithm
        tags:
          - security
          - cryptography
    - include:
        id: js/weak-sensitive-data-encryption
        tags:
          - security
          - cryptography
    - include:
        id: rs/weak-crypto-algorithm
        tags:
          - security
          - cryptography

# Schnorr signature specific validation (BIP-340)
- description: "Schnorr Signature Validation Checks"
  queries:
    - include:
        id: js/insecure-signature-verification
        tags:
          - security
          - cryptography
    - include:
        id: js/non-constant-time-signature
        tags:
          - security
          - cryptography
          - timing
    - include:
        id: rs/insecure-signature-verification
        tags:
          - security
          - cryptography