openssh/openssh-portable

Scanned on Jun 10, 2026

Risk score/ 100

High risk

Summary

OpenSSH Portable has critical post-quantum cryptography vulnerabilities with 111 quantum-vulnerable cryptographic implementations across 22 files. All primary key exchange (ECDH, X25519), signature algorithms (RSA, ECDSA, Ed25519), and legacy ciphers (3DES, MD5, SHA-1) are susceptible to quantum attacks via Shor's and Grover's algorithms. Immediate migration planning to NIST-approved PQC algorithms is required for regulatory compliance.

Critical

High

111

Medium

Low

Top findings

CriticalMD5

openbsd-compat/md5.c:51

SHA3-256 or SHA-256

Raw evidence

* Start MD5 accumulation.  Set bit count to 0 and buffer to mysterious

Critical3DES / TripleDES
cipher.c:158
Raw evidence
```
if (strcmp("3des-cbc", c->name) == 0)
```

Critical3DES / TripleDES

cipher.c:88

Raw evidence

{ "3des-cbc",		8, 24, 0, 0, CFLAG_CBC, EVP_des_ede3_cbc },

CriticalMD5
openbsd-compat/md5.h:4
SHA3-256 or SHA-256
Raw evidence
```
* This code implements the MD5 message-digest algorithm.
```
CriticalMD5
openbsd-compat/md5.h:1
SHA3-256 or SHA-256
Raw evidence
```
/*	$OpenBSD: md5.h,v 1.17 2012/12/05 23:19:57 deraadt Exp $	*/
```

+ 151 more findings in the full report

Scan your own repository

Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.

Start a free scan