Crypto-View

panva/node-oidc-provider

78474ace5fb2 (11 days ago) → d6691b1ef994 (5 hours ago)

Measure Before After Change
Readiness score 14 9 -5
Findings to address 144 128 -16
Key establishment 64 32 -32
Files scanned 438 444 +6

Added

Present in the later scan and not in the earlier one.

Finding Assessment Before After
RSASSA-PKCS1v15 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 0 20
Ed25519 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 0 16
Ed25519 Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 0 12
ECDH Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 0 8
RSA Public key declared as a JSON Web Key · jose.jwk Quantum-vulnerable 0 3
ECDSA X.509 certificate · pem.certificate Quantum-vulnerable 0 2
ECDH Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 0 1
ECDSA Public key declared as a JSON Web Key · jose.jwk Quantum-vulnerable 0 1
RSA Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 0 1
AES-192 JWT signed with a classical algorithm · js.jwt.algorithm Reduced margin 0 1
SHA-256 Keyed hash in use · js.hmac Reduced margin 0 1
ML-DSA-44 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 0 4
ML-DSA-65 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 0 1
ML-DSA-87 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 0 1

Resolved

Present in the earlier scan and gone in the later one.

Finding Assessment Before After
RSA-PKCS1v15 JWT signed with a classical algorithm · js.jwt.algorithm Already broken 34 0
Ed25519 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 15 0
Ed25519 Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 12 0
ECDH Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 9 0
ECDSA X.509 certificate · pem.certificate Quantum-vulnerable 2 0
RSA Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 1 0

Count changed

The same finding, in a different number of places.

Finding Assessment Before After
RSA-PSS JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 11 4
ECDH JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 7 6
RSA-OAEP JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 9 10
AES-128 JWT signed with a classical algorithm · js.jwt.algorithm Reduced margin 8 25
SHA-256 Hash function in use · js.hash Reduced margin 3 5
unknown Key pair algorithm chosen at runtime · js.generatekeypair.variable Could not be determined 1 2
unknown JWT signed with a classical algorithm · js.jwt.algorithm Could not be determined 3 2
CSPRNG Random number generation · js.rng Quantum-safe 10 23
HMAC JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 30 21
AES-256 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 15 12

Unchanged

7 findings appear in both scans, in the same number of places. Each scan's own report lists them.