Crypto-View

panva/node-oidc-provider

1ed7795bea6c (10 days ago) → 78474ace5fb2 (19 hours ago)

Measure Before After Change
Readiness score 13 9 -4
Findings to address 149 123 -26
Key establishment 64 32 -32
Files scanned 483 438 -45

Added

Present in the later scan and not in the earlier one.

Finding Assessment Before After
RSASSA-PKCS1v15 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 0 20
Ed25519 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 0 15
Ed25519 Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 0 12
ECDH Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 0 8
RSA Public key declared as a JSON Web Key · jose.jwk Quantum-vulnerable 0 3
ECDSA X.509 certificate · pem.certificate Quantum-vulnerable 0 2
ECDH Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 0 1
ECDSA Public key declared as a JSON Web Key · jose.jwk Quantum-vulnerable 0 1
RSA Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 0 1
AES-192 JWT signed with a classical algorithm · js.jwt.algorithm Reduced margin 0 1
ML-DSA-44 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 0 4
ML-DSA-65 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 0 1
ML-DSA-87 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 0 1

Resolved

Present in the earlier scan and gone in the later one.

Finding Assessment Before After
RSA-PKCS1v15 JWT signed with a classical algorithm · js.jwt.algorithm Already broken 34 0
Ed25519 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 16 0
Ed25519 Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 12 0
ECDH Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 9 0
ECDSA X.509 certificate · pem.certificate Quantum-vulnerable 2 0
RSA Classical key pair generated with Node crypto · js.generatekeypair Quantum-vulnerable 1 0
SHA-256 Keyed hash in use · js.hmac Reduced margin 1 0

Count changed

The same finding, in a different number of places.

Finding Assessment Before After
RSA-PSS JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 11 4
ECDSA JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 36 30
ECDH JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 7 6
RSA-OAEP JWT signed with a classical algorithm · js.jwt.algorithm Quantum-vulnerable 9 10
AES-128 JWT signed with a classical algorithm · js.jwt.algorithm Reduced margin 8 25
SHA-256 Hash function in use · js.hash Reduced margin 5 3
unknown Key pair algorithm chosen at runtime · js.generatekeypair.variable Could not be determined 2 1
unknown JWT signed with a classical algorithm · js.jwt.algorithm Could not be determined 3 2
HMAC JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 34 18
CSPRNG Random number generation · js.rng Quantum-safe 10 19
AES-256 JWT signed with a classical algorithm · js.jwt.algorithm Quantum-safe 15 12

Unchanged

6 findings appear in both scans, in the same number of places. Each scan's own report lists them.