Crypto-View

panva/node-oidc-provider

8a5917001cbe (4 days ago) → d6691b1ef994 (3 hours ago)

Measure Before After Change
Readiness score 13 0 -13
Findings to address 149 566 +417
Key establishment 64 144 +80
Files scanned 444 444 -

Added

Present in the later scan and not in the earlier one.

Finding Assessment Before After
ECDSA JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 125
RSASSA-PKCS1v15 JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 98
RSA-OAEP JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 71
Ed25519 JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 59
ECDH JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 41
RSASSA-PKCS1v15 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 0 20
Ed25519 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 0 16
Ed25519 Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 0 12
ECDH Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 0 8
RSA Public key declared as a JSON Web Key · jose.jwk Quantum-vulnerable 0 3
ECDSA X.509 certificate · pem.certificate Quantum-vulnerable 0 2
ECDH Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 0 1
ECDSA Public key declared as a JSON Web Key · jose.jwk Quantum-vulnerable 0 1
RSA Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 0 1
AES-128 JOSE algorithm declared in configuration · jose.algorithm Reduced margin 0 85
AES-192 JOSE algorithm declared in configuration · jose.algorithm Reduced margin 0 20
AES-192 JWT signed with a classical algorithm · js.jwt.algorithm Reduced margin 0 1
HMAC JOSE algorithm declared in configuration · jose.algorithm Quantum-safe 0 195
AES-256 JOSE algorithm declared in configuration · jose.algorithm Quantum-safe 0 33
ML-DSA-44 JOSE algorithm declared in configuration · jose.algorithm Quantum-safe 0 16
ML-DSA-65 JOSE algorithm declared in configuration · jose.algorithm Quantum-safe 0 9
ML-DSA-87 JOSE algorithm declared in configuration · jose.algorithm Quantum-safe 0 9
ML-DSA-44 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 0 4
ML-DSA-65 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 0 1
ML-DSA-87 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 0 1

Resolved

Present in the earlier scan and gone in the later one.

Finding Assessment Before After
RSA-PKCS1v15 JWT signed with a classical algorithm · js.jwt.algorithm Already broken 34 0
Ed25519 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 16 0
Ed25519 Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 12 0
ECDH Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 9 0
ECDSA X.509 certificate · pem.certificate Quantum-vulnerable 2 0
RSA Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 1 0

Count changed

The same finding, in a different number of places.

Finding Assessment Before After
RSA-PSS JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 2 46
RSA-PSS JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 11 4
ECDSA JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 36 33
ECDH JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 7 6
RSA-OAEP JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 9 10
AES-128 JWT signed with a classical algorithm · js.jwt.algorithm Reduced margin 8 25
unknown JWT signed with a classical algorithm · js.jwt.algorithm Could not be determined 3 2
CSPRNG Random number generation · js.rng Quantum-safe 10 23
HMAC JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 34 21
AES-256 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 15 12

Unchanged

8 findings appear in both scans, in the same number of places. Each scan's own report lists them.