Crypto-View

Peergos/Peergos

8e2e3baf101d (13 days ago) → 91563d3a2a5a (2 hours ago)

Measure Before After Change
Findings to address 35 69 +34
Quantum-vulnerable locations 6 30 +24
Quantum-safe locations 47 50 +3
Key establishment 4 24 +20
Files scanned 1106 1129 +23

Added

Present in the later scan and not in the earlier one.

Finding Assessment Before After
RSAES-PKCS1v15 TLS cipher suite named in source · config.cipher-suite Already broken 0 5
NULL TLS cipher suite named in source · config.cipher-suite Already broken 0 1
ECDH TLS cipher suite named in source · config.cipher-suite Quantum-vulnerable 0 15
DH TLS cipher suite named in source · config.cipher-suite Quantum-vulnerable 0 2
ECDSA COSE algorithm identifier · cose.algorithm Quantum-vulnerable 0 2
Ed25519 COSE algorithm identifier · cose.algorithm Quantum-vulnerable 0 2
Ed25519 JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 2
Ed25519 Classical key pair generated through the JCA · java.keypairgenerator Quantum-vulnerable 0 1
Ed25519 Classical signature algorithm through the JCA · java.signature Quantum-vulnerable 0 1
RSASSA-PKCS1v15 COSE algorithm identifier · cose.algorithm Quantum-vulnerable 0 1
AES Classical public-key cipher through the JCA · java.cipher Reduced margin 0 2
AES Key material constructed for a named algorithm · java.keyspec Reduced margin 0 1
AES Cipher transformation named away from the call · java.transformation Reduced margin 0 1
HMAC Key material constructed for a named algorithm · java.keyspec Quantum-safe 0 3

Resolved

Present in the earlier scan and gone in the later one.

Finding Assessment Before After
Ed25519 Classical key pair generated through the JCA · java.keypairgenerator Quantum-vulnerable 1 0
Ed25519 Classical signature algorithm through the JCA · java.signature Quantum-vulnerable 1 0
unknown Key pair algorithm chosen at runtime · java.keypairgenerator.variable Could not be determined 2 0

Count changed

The same finding, in a different number of places.

Finding Assessment Before After
SHA-256 Hash algorithm through the JCA · java.messagedigest Reduced margin 13 18
HMAC Message authentication code through the JCA · java.mac Quantum-safe 2 3
scrypt Password hashing or key derivation · java.kdf Quantum-safe 5 4

Unchanged

9 findings appear in both scans, in the same number of places. Each scan's own report lists them.