Crypto-View

panva/node-oidc-provider

78474ace5fb2 (18 hours ago) → d6691b1ef994 (3 hours ago)

Measure Before After Change
Readiness score 9 0 -9
Findings to address 123 566 +443
Key establishment 32 144 +112
Files scanned 438 444 +6

Added

Present in the later scan and not in the earlier one.

Finding Assessment Before After
ECDSA JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 125
RSASSA-PKCS1v15 JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 98
RSA-OAEP JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 71
Ed25519 JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 59
ECDH JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 41
AES-128 JOSE algorithm declared in configuration · jose.algorithm Reduced margin 0 85
AES-192 JOSE algorithm declared in configuration · jose.algorithm Reduced margin 0 20
SHA-256 Keyed hash in use · js.hmac Reduced margin 0 1
HMAC JOSE algorithm declared in configuration · jose.algorithm Quantum-safe 0 195
AES-256 JOSE algorithm declared in configuration · jose.algorithm Quantum-safe 0 33
ML-DSA-44 JOSE algorithm declared in configuration · jose.algorithm Quantum-safe 0 16
ML-DSA-65 JOSE algorithm declared in configuration · jose.algorithm Quantum-safe 0 9
ML-DSA-87 JOSE algorithm declared in configuration · jose.algorithm Quantum-safe 0 9

Count changed

The same finding, in a different number of places.

Finding Assessment Before After
RSA-PSS JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 2 46
ECDSA JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 30 33
Ed25519 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 15 16
SHA-256 Hash function in use · js.hash Reduced margin 3 5
unknown Key pair algorithm chosen at runtime · js.generatekeypair.variable Could not be determined 1 2
CSPRNG Random number generation · js.rng Quantum-safe 19 23
HMAC JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 18 21

Unchanged

23 findings appear in both scans, in the same number of places. Each scan's own report lists them.