Crypto-View

certbot/certbot

e75e7378cd02 (1 day ago) → 485649333422 (2 hours ago)

Measure Before After Change
Findings to address 168 175 +7
Quantum-vulnerable locations 165 180 +15
Quantum-safe locations 2 17 +15
Key establishment 70 83 +13
Files scanned 785 829 +44

Added

Present in the later scan and not in the earlier one.

Finding Assessment Before After
RSA-1024 Certificate signing request · pem.certificate-request Already broken 0 11
DES TLS cipher suites pinned in configuration · config.tls-ciphers Already broken 0 1
ECDH TLS cipher suite named in source · config.cipher-suite Quantum-vulnerable 0 10
RSA Certificate signing request · pem.certificate-request Quantum-vulnerable 0 7
DH TLS cipher suite named in source · config.cipher-suite Quantum-vulnerable 0 1
ECDSA Certificate signing request · pem.certificate-request Quantum-vulnerable 0 1
RSASSA-PKCS1v15 JOSE algorithm declared in configuration · jose.algorithm Quantum-vulnerable 0 1
HMAC JOSE algorithm declared in configuration · jose.algorithm Quantum-safe 0 10
ML-DSA-44 Post-quantum algorithm in use · py.pqc Quantum-safe 0 1
ML-DSA-65 Post-quantum algorithm in use · py.pqc Quantum-safe 0 1
ML-DSA-87 Post-quantum algorithm in use · py.pqc Quantum-safe 0 1
ML-KEM-1024 Post-quantum algorithm in use · py.pqc Quantum-safe 0 1
ML-KEM-768 Post-quantum algorithm in use · py.pqc Quantum-safe 0 1

Resolved

Present in the earlier scan and gone in the later one.

Finding Assessment Before After
MD5 TLS cipher suites pinned in configuration · config.tls-ciphers Already broken 6 0

Count changed

The same finding, in a different number of places.

Finding Assessment Before After
RSA-1024 X.509 certificate · pem.certificate Already broken 19 8
RC4 TLS cipher suites pinned in configuration · config.tls-ciphers Already broken 8 5
TLS TLS cipher suites pinned in configuration · config.tls-ciphers Quantum-vulnerable 8 16
RSA X.509 certificate · pem.certificate Quantum-vulnerable 36 29
RSA RSA key generated with pyca/cryptography · py.cryptography.rsa Quantum-vulnerable 22 17
ECDSA X.509 certificate · pem.certificate Quantum-vulnerable 7 6

Unchanged

22 findings appear in both scans, in the same number of places. Each scan's own report lists them.