hyperchain/javasdk

f0079eefedb9 (3 days ago) → f0079eefedb9 (6 hours ago)

Measure	Before	After	Change
Readiness score	45	0	-45
Findings to address	96	106	+10
Key establishment	26	4	-22
Files scanned	422	422	-

Added

Present in the later scan and not in the earlier one.

Finding	Assessment	After
3DES Key material constructed for a named algorithm · `java.keyspec`	Already broken	2
DES Key material constructed for a named algorithm · `java.keyspec`	Already broken	2
EC Elliptic-curve cryptography through BouncyCastle · `java.bouncycastle.ec`	Quantum-vulnerable	8
Ed25519 Edwards-curve signatures through BouncyCastle · `java.bouncycastle.eddsa`	Quantum-vulnerable	5
EC Classical key pair generated through the JCA · `java.keypairgenerator`	Quantum-vulnerable	4
EC Classical key material handled through the JCA · `java.keyfactory`	Quantum-vulnerable	3
ECDH Classical key agreement through the JCA · `java.keyagreement`	Quantum-vulnerable	3
secp256k1 Named elliptic curve requested · `java.eccurve`	Quantum-vulnerable	2
EC Named elliptic curve requested · `java.eccurve`	Quantum-vulnerable	1
AES Key material constructed for a named algorithm · `java.keyspec`	Reduced margin	2
SM4 Key material constructed for a named algorithm · `java.keyspec`	Reduced margin	1

Present in the earlier scan and gone in the later one.

Finding	Assessment	Before	After
Ed25519 Edwards-curve signatures through BouncyCastle · `java.bouncycastle.eddsa`	Quantum-vulnerable	5	0

The same finding, in a different number of places.

Finding	Assessment	Before	After
ECDSA Elliptic-curve cryptography through BouncyCastle · `java.bouncycastle.ec`	Quantum-vulnerable	57	49
ECDSA Classical signature algorithm through the JCA · `java.signature`	Quantum-vulnerable	1	4
SHA-256 Hash algorithm through the JCA · `java.messagedigest`	Reduced margin	1	2
unknown Key pair algorithm chosen at runtime · `java.keypairgenerator.variable`	Could not be determined	14	1

13 findings appear in both scans, in the same number of places. Each scan's own report lists them.