Repository
muttmua/mutt
Scanned on May 22, 2026
68
Risk score/ 100
High risk
Summary
The Mutt email client uses Ed25519 for Autocrypt key generation, which is vulnerable to quantum attacks via Shor's algorithm. While Ed25519 is currently secure against classical attacks, systems expecting long-term confidentiality (5-10+ years) face significant risk as quantum computers advance. Migration to NIST-approved post-quantum algorithms is necessary for future-proof cryptographic protection.
Critical
0
High
1
Medium
0
Low
0
Top findings
- HighEd25519 / EdDSA
autocrypt/autocrypt_gpgme.c:139
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA
Scan your own repository
Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.