Crypto-View

smallstep/certificates

fa946c527a6c (9 days ago) → f35d82e63d0b (3 hours ago)

Measure Before After Change
Findings to address 444 902 +458
Quantum-vulnerable locations 523 944 +421
Quantum-safe locations 42 48 +6
Key establishment 95 234 +139
Files scanned 456 479 +23

Added

Present in the later scan and not in the earlier one.

Finding Assessment Before After
RSAES-PKCS1v15 TLS cipher suite named in source · config.cipher-suite Already broken 0 21
RC4 TLS cipher suite named in source · config.cipher-suite Already broken 0 7
3DES TLS cipher suite named in source · config.cipher-suite Already broken 0 6
ECDH TLS cipher suite named in source · config.cipher-suite Quantum-vulnerable 0 119
ECDSA SSH algorithms pinned in configuration · config.ssh-algorithms Quantum-vulnerable 0 16
Ed25519 JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 7
ECDSA Algorithm named in a setting · config.algorithm-setting Quantum-vulnerable 0 3
RSASSA-PKCS1v15 JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 3
RSASSA-PKCS1v15 SSH algorithms pinned in configuration · config.ssh-algorithms Quantum-vulnerable 0 1
ML-DSA-65 Post-quantum algorithm in use · go.pqc Quantum-safe 0 4
HMAC JOSE algorithm declared in configuration · jose.algorithm Quantum-safe 0 1

Resolved

Present in the earlier scan and gone in the later one.

Finding Assessment Before After
ECDH Key agreement in Go · go.ecdh Quantum-vulnerable 1 0

Count changed

The same finding, in a different number of places.

Finding Assessment Before After
ECDSA JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 30 303
ECDSA ECDSA in the Go standard library · go.ecdsa Quantum-vulnerable 40 42
ECDSA ECDSA in the Go standard library · go.ecdsa Quantum-vulnerable 3 2
RSA RSA in the Go standard library · go.rsa Quantum-vulnerable 2 1
RSA RSA in the Go standard library · go.rsa Quantum-vulnerable 19 20
unknown X.509 certificate handling · go.x509 Could not be determined 13 15

Unchanged

35 findings appear in both scans, in the same number of places. Each scan's own report lists them.