rules:
  - id: csharp-weak-dh-dsa
    pattern-either:
      - pattern: new DSACryptoServiceProvider(...)
      - pattern: DSA.Create(...)
      - pattern: new DSACng(...)
      - pattern: ECDiffieHellman.Create(...)
      - pattern: new ECDiffieHellmanCng(...)
    message: DH/DSA key generation detected - quantum vulnerable
    severity: WARNING
    languages:
      - csharp
    metadata:
      category: security
      quantum_vulnerable: true
      quantum_risk_score: 80
