quantumscan-io/scanner-core

Scanned on Jun 26, 2026

Risk score/ 100

Clean

Summary

This repository contains test fixtures for a quantum vulnerability scanner, not production cryptographic code. All 48 findings are pattern definitions in test files used to validate the scanner's detection capabilities. No actual cryptographic implementations are present, resulting in negligible quantum risk.

Critical

High

Medium

Low

Top findings

HighGRANDPA Authority Key (ed25519)
test/substrate-patterns.test.js:79
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA when Substrate PQC pallets land
Raw evidence
```
test("grandpa-authority: detects GrandpaId", () =>
```
HighBABE Authority Key (sr25519)
test/substrate-patterns.test.js:22
ML-DSA (CRYSTALS-Dilithium) via sp-core PQC extension when standardized
Raw evidence
```
re: /BabeId|babe_generate_session_keys|sr25519::(?:Public|Pair|Signature)\b|app_crypto!\s*\(.*sr25519|BabeAuthorityId|BabeKeyType/i },
```

HighCWE-327Ed25519 / EdDSA

test/substrate-patterns.test.js:24

ML-DSA (CRYSTALS-Dilithium) or SLH-DSA

Raw evidence

re: /GrandpaId|grandpa_generate_session_keys|ed25519::(?:Public|Pair|Signature)\b|GrandpaAuthorityId|AuthorityList.*grandpa|GrandpaKeyType|GRANDPA_ENGINE_ID/i },

HighSubstrate Session Keys (multi-key)

test/substrate-patterns.test.js:26

Await Polkadot PQC session key migration RFC

Raw evidence

re: /impl_opaque_keys!\s*\{|SessionKeys\s*\{[^}]*(?:babe|grandpa|im_online|authority_discovery)|generate_session_keys|decode_session_keys/i },

HighSubstrate Validator Keystore

test/substrate-patterns.test.js:28

Monitor substrate-crypto PQC keystore RFC

Raw evidence

re: /KeystorePtr|SyncCryptoStorePtr|LocalKeystore::open|keystore\.(?:sr25519_generate_new|ed25519_generate_new|ecdsa_generate_new)|sp_keystore|CryptoStore/i },

+ 43 more findings in the full report

Scan your own repository

Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.

Start a free scan