---
id: 1583
title: "Catching OpenSSL misuse using CodeQL"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2023/12/22/catching-openssl-misuse-using-codeql/"
published_at: "2023-12-22T14:00:35Z"
tags: ["appsec", "cryptography", "c", "openssl", "static-analysis", "codeql", "cpp"]
phying_url: "https://phying.com/item/1583"
lang: en
---

# Catching OpenSSL misuse using CodeQL

## Summary

Five CodeQL queries catch OpenSSL libcrypto misuse—short cipher keys, missing entropy initialization, and uncleared bignums—that can cause memory leaks or authentication bypasses in C/C++ codebases.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2023-12-22T14:00:35Z
- **Original:** https://blog.trailofbits.com/2023/12/22/catching-openssl-misuse-using-codeql/
- **Phying News:** https://phying.com/item/1583