TestimoX

API Reference

Class

PkiCaRocaSuspected

Edit on GitHub
Namespace TestimoX.Rules.Domain.PKI
Assembly TestimoX
Source TestimoX/Rules/Domain/PKI/PkiCaRocaSuspected.cs:25
Modifiers static

Heuristic ROCA suspicion detector (pre-filter): RSA keys with exponent 65537, common vulnerable key sizes, and issuance window (2012–2017). Use vendor tools for definitive confirmation. Mirrors PingCastle A-CertROCA intent as a first pass.

Inheritance

  • Object
  • PkiCaRocaSuspected

Methods

public static Rule GetRule() #
TestimoX/Rules/Domain/PKI/PkiCaRocaSuspected.cs:25
Returns: Rule

Builds the rule that flags CA certificates matching ROCA suspicion heuristics (pre‑filter).