mirror of
https://github.com/VirusTotal/yara.git
synced 2026-10-12 02:10:00 +00:00
Hilko Bengen
9fd9a80db6
* pe: add signature[i].algorithm_oid Certificate signature algorithms are encoded using object identifiers whose text representations depend on the cryptographic library. For stable YARA rules, it is wiser to rely on the OID, so let's provide it. For example, while OpenSSL 1.1.1d resolves 1.2.840.113549.1.1.11 to "sha256WithRSAEncryption" (or "RSA-SHA256" for the short name), the only string representation I have gotten out of the Windows CryptoAPI is "sha256RSA". * Add documentation for signature[i].algorithm_oid