keycloak/keycloak

3a720903102b (1 day ago) → 13f76e360154 (20 hours ago)

Measure	Before	After	Change
Readiness score	0	0	-
Findings to address	257	270	+13
Key establishment	114	109	-5
Files scanned	10716	10502	-214

Added

Present in the later scan and not in the earlier one.

Finding	Assessment	After
RSAES-PKCS1v15 Cipher transformation named away from the call · `java.transformation`	Already broken	2
AES Key material constructed for a named algorithm · `java.keyspec`	Reduced margin	16
PBKDF2 Key material constructed for a named algorithm · `java.keyspec`	Reduced margin	2
unknown Key material constructed for a named algorithm · `java.keyspec`	Could not be determined	1
HMAC Key material constructed for a named algorithm · `java.keyspec`	Quantum-safe	13

Present in the earlier scan and gone in the later one.

Finding	Assessment	Before	After
ECDH Named elliptic curve requested · `java.eccurve`	Quantum-vulnerable	1	0

The same finding, in a different number of places.

Finding	Assessment	Before	After
MD5 Hash algorithm through the JCA · `java.messagedigest`	Already broken	2	1
SHA-1 Hash algorithm through the JCA · `java.messagedigest`	Already broken	4	3
ECDH Classical key pair generated through the JCA · `java.keypairgenerator`	Quantum-vulnerable	15	11
ECDH Named elliptic curve requested · `java.eccurve`	Quantum-vulnerable	10	7
RSA X.509 certificate · `pem.certificate`	Quantum-vulnerable	17	16
TLS TLS context created in code · `java.sslcontext`	Quantum-vulnerable	18	19
SHA-256 Hash algorithm through the JCA · `java.messagedigest`	Reduced margin	9	15
PBKDF2 Password hashing or key derivation · `java.kdf`	Reduced margin	14	17
Kerberos Kerberos or SPNEGO authentication · `java.kerberos`	Reduced margin	9	8
unknown Private key committed to the repository · `pem.private-key`	Could not be determined	2	1
CSPRNG Random number generation · `java.rng`	Quantum-safe	38	36

34 findings appear in both scans, in the same number of places. Each scan's own report lists them.