Crypto-View

certbot/certbot

56ee04928d67 (3 days ago) → e75e7378cd02 (20 hours ago)

Measure Before After Change
Readiness score 0 0 -
Findings to address 165 168 +3
Key establishment 126 70 -56
Files scanned 784 785 +1

Added

Present in the later scan and not in the earlier one.

Finding Assessment Before After
RSA-1024 X.509 certificate · pem.certificate Already broken 0 19
RSA-1024 X.509 certificate · pem.certificate Already broken 0 1
RSAES-PKCS1v15 PKCS#1 v1.5 padding · py.cryptography.pkcs1v15 Already broken 0 1
ECDSA X.509 certificate · pem.certificate Quantum-vulnerable 0 7
ECDSA Elliptic-curve key generated with pyca/cryptography · py.cryptography.ec Quantum-vulnerable 0 6
RSA RSA key generated with pyca/cryptography · py.cryptography.rsa Quantum-vulnerable 0 5
ECDSA Private key committed to the repository · pem.private-key Quantum-vulnerable 0 2
ECDSA Private key committed to the repository · pem.private-key Quantum-vulnerable 0 1
ECDSA Elliptic-curve key generated with pyca/cryptography · py.cryptography.ec Quantum-vulnerable 0 1
RSA Public key declared as a JSON Web Key · jose.jwk Quantum-vulnerable 0 1
X25519 X25519 key agreement · py.cryptography.x25519 Quantum-vulnerable 0 1

Resolved

Present in the earlier scan and gone in the later one.

Finding Assessment Before After
RSA X.509 certificate · pem.certificate Quantum-vulnerable 19 0
ECDSA X.509 certificate · pem.certificate Quantum-vulnerable 7 0
ECDSA Elliptic-curve key generated with pyca/cryptography · py.cryptography.ec Quantum-vulnerable 6 0
ECDSA Private key committed to the repository · pem.private-key Quantum-vulnerable 2 0
ECDSA Private key committed to the repository · pem.private-key Quantum-vulnerable 1 0
ECDSA Elliptic-curve key generated with pyca/cryptography · py.cryptography.ec Quantum-vulnerable 1 0
RSA X.509 certificate · pem.certificate Quantum-vulnerable 1 0
X25519 X25519 key agreement · py.cryptography.x25519 Quantum-vulnerable 1 0

Count changed

The same finding, in a different number of places.

Finding Assessment Before After
RSA RSA key generated with pyca/cryptography · py.cryptography.rsa Quantum-vulnerable 26 22

Unchanged

17 findings appear in both scans, in the same number of places. Each scan's own report lists them.