codyze
codyze copied to clipboard
Duplicate conditions in MARK rules
In the following rule from the Bouncy Castle ruleset, the _is(m.key, kg.key)
is mentioned as precondition and condition both. Based on MARK, the condition statement will be examined if a precondition is met. Therefore, it does not make sense to have this condition in both places. Am I missing something here, or is this just a mistake?
rule ID_5_3_02_CMAC_Keygen {
using
Mac as m,
KeyGenerator as kg
when
m.algorithm in ["AESCMAC"]
&& _is(m.key, kg.key)
ensure
// find a keygenerator of sufficient size
_is(m.key, kg.key)
&& kg.keysize >= 128
onfail
InsufficientCMACKeyLength
}