Crypto-View

DominikPeters/tikz-editor

Cryptographic posture

5 cryptographic locations: 1 reduced-margin, 1 undetermined, 3 quantum-safe

826 files analysed.

Reduced margin 1 Could not be determined 1 Quantum-safe 3
To address0
Key establishment0
Inventory only0
Total findings5
What was analysed
Branch master
Commit be197d85e278bf76c5fc052931b7902942e274e7 other tools: support partial undo, stop on document switch
Committed 2026-07-10 12:24 UTC
Scanned 2026-09-13 03:39 UTC 1 hour ago
Coverage 826 files, 757 javascript

Earlier scans of this repository

20 scans · compare any two
0 to 3 locations Reduced margin 1 → 1 (unchanged) Could not be determined 1 → 1 (unchanged) Quantum-safe 3 → 3 (unchanged) The filled point is the scan you are reading.
Scanned Commit To address Key establishment
1 hour ago this scan be197d85e278 master 0 0
2 days ago be197d85e278 master 0 0 Compare
2 days ago be197d85e278 master 0 0 Compare
2 days ago be197d85e278 master 0 0 Compare
2 days ago be197d85e278 master 0 0 Compare
2 days ago be197d85e278 master 0 0 Compare
2 days ago be197d85e278 master 0 0 Compare
2 days ago be197d85e278 master 0 0 Compare
2 days ago be197d85e278 master 0 0 Compare
2 days ago be197d85e278 master 0 0 Compare
2 days ago be197d85e278 master 0 0 Compare
2 days ago be197d85e278 master 0 0 Compare
2 days ago be197d85e278 master 0 0 Compare
3 days ago be197d85e278 master 0 0 Compare
3 days ago be197d85e278 master 0 0 Compare
3 days ago be197d85e278 master 0 0 Compare
3 days ago be197d85e278 master 0 0 Compare
5 days ago be197d85e278 master 0 0 Compare
5 days ago be197d85e278 master 0 0 Compare
11 days ago be197d85e278 master 0 0 Compare

Every repository in this history is re-scanned weekly.

List of cryptographic assets

SHA-256 Reduced margin 1 place See details

Hash function in use

`createHash()` or `subtle.digest()`. The digest is read from the argument, so one rule covers the family: MD5 and SHA-1 are reported as broken, SHA-256 as a reduced margin, SHA-384 and above as inventory.

A quantum computer weakens this but does not break it. Increasing the key or digest size restores the margin. Pre-image resistance falls to about 128 bits of quantum work. Adequate for most uses; SHA-384 restores the full margin where a signature must last decades.

What to do. SHA-256 as the floor, SHA-384 where the digest protects something long-lived.

  1. test/web/open-example-preview.spec.ts:31 test path return createHash("sha256").update(value ?? "").digest("hex");
js.hash · CWE-328
CSPRNG Quantum-safe 3 places See details

Random number generation

`crypto.randomBytes()`, `randomUUID()` or `getRandomValues()`. A platform CSPRNG is not a quantum exposure; it is recorded because an inventory that omits the randomness source is incomplete. `Math.random()` is a separate, present-day defect.

This is where the software gets its random numbers. Quantum computers do not weaken it.

What to do. No action.

  1. apps/web/src/platform/browser-platform.ts:91 return crypto.randomUUID();
  2. packages/app/src/store/workspace-state.ts:50 return crypto.randomUUID();
  3. packages/app/src/ui/App.tsx:866 id: crypto.randomUUID(),
js.rng

Cryptographic assets

Algorithm Assessment What it means Occurrences
CSPRNG Quantum-safe A cryptographically secure random number generator provided by the platform. Not weakened by a quantum computer. 3
SHA-256 Reduced margin Pre-image resistance falls to about 128 bits of quantum work. Adequate for most uses; SHA-384 restores the full margin where a signature must last decades. 1
unknown Could not be determined The algorithm could not be established from the source - chosen at runtime, or decided somewhere this scan does not reach. 1

Imported cryptographic libraries

Library Files
node:crypto the Node crypto module 1