Skip to content

Conversation

@Diolor
Copy link
Collaborator

@Diolor Diolor commented Nov 27, 2025

This PR closes #3532

Takeover from copilot PR #3533

Description

New Test: MASTG-TEST-0304

  • Detects kCCOptionECBMode (value 0x0002) in CCCrypt calls
  • Follows MASTG-TEST-0210 structure

New Demo: MASTG-DEMO-0068

  • Demonstrates ECB mode detection using radare2
  • Swift sample showing insecure CCCrypt usage with ECB flag:
 CCCrypt( CCOperation(kCCEncrypt), CCAlgorithm(kCCAlgorithmAES), CCOptions(kCCOptionECBMode), // ECB mode - INSECURE! keyBytes, kCCKeySizeAES128, nil, // No IV needed for ECB ... )

Before merge:

  • Check demo ID
Copilot AI and others added 7 commits November 22, 2025 11:46
Co-authored-by: cpholguera <29175115+cpholguera@users.noreply.github.com>
Co-authored-by: cpholguera <29175115+cpholguera@users.noreply.github.com>
Co-authored-by: cpholguera <29175115+cpholguera@users.noreply.github.com>
Co-authored-by: cpholguera <29175115+cpholguera@users.noreply.github.com>
@Diolor Diolor self-assigned this Nov 27, 2025
@Diolor Diolor added the iOS label Nov 27, 2025
@sk3l10x1ng
Copy link
Collaborator

@cpholguera could pls assign, will review the pull request

@cpholguera cpholguera requested a review from sk3l10x1ng December 1, 2025 09:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3 participants