Crypto-View

DominikPeters/tikz-editor

Readiness score
100 of 100
How this is calculated · previous scan 100
Cryptographic posture
Reduced margin 1 Could not be determined 1 Quantum-safe 3
To address0
Key establishment0
Inventory only0
Total findings5
What was analysed
Branch master
Commit be197d85e278bf76c5fc052931b7902942e274e7 other tools: support partial undo, stop on document switch
Committed 2026-07-10 12:24 UTC
Scanned 2026-09-07 18:52 UTC 3 days ago
Coverage 820 files, 757 javascript

Earlier scans of this repository

19 scans · score 100 → 100 · compare any two
19 scans · 100 → 100 (unchanged). The filled point is the scan you are reading.
Scanned Commit Score To address
4 hours ago be197d85e278 master 100 0 Compare
5 hours ago be197d85e278 master 100 0 Compare
5 hours ago be197d85e278 master 100 0 Compare
5 hours ago be197d85e278 master 100 0 Compare
5 hours ago be197d85e278 master 100 0 Compare
5 hours ago be197d85e278 master 100 0 Compare
5 hours ago be197d85e278 master 100 0 Compare
5 hours ago be197d85e278 master 100 0 Compare
5 hours ago be197d85e278 master 100 0 Compare
5 hours ago be197d85e278 master 100 0 Compare
5 hours ago be197d85e278 master 100 0 Compare
21 hours ago be197d85e278 master 100 0 Compare
1 day ago be197d85e278 master 100 0 Compare
1 day ago be197d85e278 master 100 0 Compare
1 day ago be197d85e278 master 100 0 Compare
1 day ago be197d85e278 master 100 0 Compare
3 days ago this scan be197d85e278 master 100 0
3 days ago be197d85e278 master 100 0 Compare
8 days ago be197d85e278 master 100 0 Compare

Every repository in this history is re-scanned weekly.

List of cryptographic assets

SHA-256 Reduced margin 1 place See details

Hash function in use

`createHash()` or `subtle.digest()`. The digest is read from the argument, so one rule covers the family: MD5 and SHA-1 are reported as broken, SHA-256 as a reduced margin, SHA-384 and above as inventory.

A quantum computer weakens this but does not break it. Increasing the key or digest size restores the margin. Pre-image resistance falls to about 128 bits of quantum work. Adequate for most uses; SHA-384 restores the full margin where a signature must last decades.

What to do. SHA-256 as the floor, SHA-384 where the digest protects something long-lived.

  1. test/web/open-example-preview.spec.ts:31 test path return createHash("sha256").update(value ?? "").digest("hex");
js.hash · CWE-328
CSPRNG Quantum-safe 3 places See details

Random number generation

`crypto.randomBytes()`, `randomUUID()` or `getRandomValues()`. A platform CSPRNG is not a quantum exposure; it is recorded because an inventory that omits the randomness source is incomplete. `Math.random()` is a separate, present-day defect.

This is where the software gets its random numbers. Quantum computers do not weaken it.

What to do. No action.

  1. apps/web/src/platform/browser-platform.ts:91 return crypto.randomUUID();
  2. packages/app/src/store/workspace-state.ts:50 return crypto.randomUUID();
  3. packages/app/src/ui/App.tsx:866 id: crypto.randomUUID(),
js.rng

Cryptographic assets

Algorithm Assessment What it means Occurrences
CSPRNG Quantum-safe A cryptographically secure random number generator provided by the platform. Not weakened by a quantum computer. 3
SHA-256 Reduced margin Pre-image resistance falls to about 128 bits of quantum work. Adequate for most uses; SHA-384 restores the full margin where a signature must last decades. 1
unknown Could not be determined The algorithm could not be established from the source - chosen at runtime, or decided somewhere this scan does not reach. 1

Imported cryptographic libraries

Library Files
node:crypto — the Node crypto module 1