Crypto-View

Peergos/Peergos

f2cdc1955e60 (11 days ago) → 21bc1cc602e9 (4 hours ago)

Measure Before After Change
Readiness score 86 20 -66
Findings to address 14 69 +55
Key establishment 2 24 +22
Files scanned 868 1123 +255

Added

Present in the later scan and not in the earlier one.

Finding Assessment Before After
RSAES-PKCS1v15 TLS cipher suite named in source · config.cipher-suite Already broken 0 5
ECDH TLS cipher suite named in source · config.cipher-suite Quantum-vulnerable 0 15
DH TLS cipher suite named in source · config.cipher-suite Quantum-vulnerable 0 2
ECDSA COSE algorithm identifier · cose.algorithm Quantum-vulnerable 0 2
Ed25519 COSE algorithm identifier · cose.algorithm Quantum-vulnerable 0 2
Ed25519 JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 2
Ed25519 Classical key pair generated through the JCA · java.keypairgenerator Quantum-vulnerable 0 1
Ed25519 Classical signature algorithm through the JCA · java.signature Quantum-vulnerable 0 1
RSASSA-PKCS1v15 COSE algorithm identifier · cose.algorithm Quantum-vulnerable 0 1
AES Classical public-key cipher through the JCA · java.cipher Reduced margin 0 2
AES Key material constructed for a named algorithm · java.keyspec Reduced margin 0 1
AES Cipher transformation named away from the call · java.transformation Reduced margin 0 1
SHA3-256 Hash algorithm through the JCA · java.messagedigest Reduced margin 0 1
NULL TLS cipher suite named in source · config.cipher-suite Could not be determined 0 1
ML-KEM-768 Post-quantum algorithm through BouncyCastle · java.bouncycastle.pqc Quantum-safe 0 26
HMAC Key material constructed for a named algorithm · java.keyspec Quantum-safe 0 3
SHA3-512 Hash algorithm through the JCA · java.messagedigest Quantum-safe 0 1

Count changed

The same finding, in a different number of places.

Finding Assessment Before After
MD5 Hash algorithm through the JCA · java.messagedigest Already broken 1 4
SHA-256 Hash algorithm through the JCA · java.messagedigest Reduced margin 6 18
unknown Non-cryptographic randomness near key material · java.random.insecure Could not be determined 4 10
CSPRNG Random number generation · java.rng Quantum-safe 6 13
HMAC Message authentication code through the JCA · java.mac Quantum-safe 1 3

Unchanged

4 findings appear in both scans, in the same number of places. Each scan's own report lists them.