rules:
  - id: csharp-weak-ecc-curve
    pattern-either:
      - pattern: ECDsa.Create(ECCurve.NamedCurves.$CURVE)
      - pattern: ECDiffieHellman.Create(ECCurve.NamedCurves.$CURVE)
      - pattern: new ECDsaCng(ECCurve.NamedCurves.$CURVE)
    message: Quantum-vulnerable ECC curve detected
    severity: WARNING
    languages:
      - csharp
    metadata:
      category: security
      quantum_vulnerable: true
      quantum_risk_score: 85
