Skip to content
QuantumScanPublic scan report

Repository

NTPsec/ntpsec

Scanned on May 22, 2026

45

Risk score/ 100

Moderate risk

Summary

NTPsec repository contains 29 instances of quantum-vulnerable cryptographic primitives, primarily concentrated in legacy 'attic' code. While most critical findings (DES, MD5, SHA-1) exist in deprecated testing utilities rather than production code, the presence of DSA and Ed25519 in timing tests indicates awareness of algorithms that will fail against quantum attacks. The codebase shows reliance on older OpenSSL versions lacking post-quantum readiness.

Critical

22

High

3

Medium

4

Low

0

Top findings

  • CriticalDES

    attic/cipher-find.c:36

  • CriticalSHA-1

    contrib/keygone.py:33

    SHA-256 or SHA3-256

  • CriticalSHA-1

    contrib/make-leap-seconds.py:71

    SHA-256 or SHA3-256

  • CriticalSHA-1

    contrib/make-leap-seconds.py:73

    SHA-256 or SHA3-256

  • CriticalSHA-1

    contrib/make-leap-seconds.py:74

    SHA-256 or SHA3-256

+ 24 more findings in the full report

Scan your own repository

Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.

Start a free scan