[RAT-4] Check crypto usage or implementation

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: core engine
• Assignee: Unassigned
• Reporter: Sebb
• Created: 17/Feb/08 14:54
• Updated: 20/May/13 18:36

Description

RAT could perhaps be extended to look for usage or implementation of export controlled software such as JSSE and JCE, and check that the appropriate section is present in the README file.

It would probably be too difficult to check that the details in the README file were correct, but it should be possible to check if the boilerplate is present.

Usage of JSSE and JCE could be detected by looking for the relevant Java import statements, e.g.

JSSE
java.security.*
javax.net.ssl

JCE
javax.crypto.*

Issue Links

• is duplicated by: RAT-51 Check Crypto