Crypto-View

apache/httpcomponents-client

ffe4a05f4faf (12 days ago) → be07c7729757 (2 hours ago)

Measure Before After Change
Findings to address 54 73 +19
Quantum-vulnerable locations 44 60 +16
Quantum-safe locations 4 11 +7
Key establishment 44 6 -38
Files scanned 815 1216 +401

Added

Present in the later scan and not in the earlier one.

Finding Assessment Before After
RC4 Key material constructed for a named algorithm · java.keyspec Already broken 0 3
SHA-1 Hash algorithm through the JCA · java.messagedigest Already broken 0 2
3DES TLS cipher suite named in source · config.cipher-suite Already broken 0 1
DES Key material constructed for a named algorithm · java.keyspec Already broken 0 1
NULL TLS cipher suite named in source · config.cipher-suite Already broken 0 1
RC4 TLS cipher suite named in source · config.cipher-suite Already broken 0 1
RSAES-PKCS1v15 TLS cipher suite named in source · config.cipher-suite Already broken 0 1
ECDH TLS cipher suite named in source · config.cipher-suite Quantum-vulnerable 0 2
TLS TLS cipher suites pinned in configuration · config.tls-ciphers Quantum-vulnerable 0 1
PBKDF2 Password hashing or key derivation · java.kdf Reduced margin 0 2
PBKDF2 Key material constructed for a named algorithm · java.keyspec Reduced margin 0 2
SHA-256 Classical public-key cipher through the JCA · java.cipher Reduced margin 0 2
HMAC Key material constructed for a named algorithm · java.keyspec Quantum-safe 0 2
HMAC Message authentication code through the JCA · java.mac Quantum-safe 0 2

Resolved

Present in the earlier scan and gone in the later one.

Finding Assessment Before After
RC4 TLS cipher suites pinned in configuration · config.tls-ciphers Already broken 1 0

Count changed

The same finding, in a different number of places.

Finding Assessment Before After
NTLM NTLM authentication · java.ntlm Already broken 10 9
SHA-256 Hash algorithm through the JCA · java.messagedigest Reduced margin 3 9
CSPRNG Random number generation · java.rng Quantum-safe 4 7

Unchanged

10 findings appear in both scans, in the same number of places. Each scan's own report lists them.