tlsfuzzer/python-ecdsa

Scanned on May 11, 2026

Risk score/ 100

Critical risk

Summary

This repository implements ECDSA cryptographic signatures, which are fundamentally vulnerable to quantum attacks via Shor's algorithm. The library contains 143 high-severity quantum-vulnerable findings across elliptic curve implementations, plus critical usage of broken hash functions (SHA-1, MD5) that compound the security risks. Immediate migration planning to post-quantum cryptography is essential for any production deployments.

Critical

High

143

Medium

Low

Top findings

CriticalMD5
src/ecdsa/test_malformed_sigs.py:9
SHA3-256 or SHA-256
Raw evidence
```
"md5",
```
CriticalSHA-1
src/ecdsa/rfc6979.py:50
SHA-256 or SHA3-256
Raw evidence
```
hash, like :py:class:`hashlib.sha1`
```
CriticalSHA-1
src/ecdsa/test_malformed_sigs.py:10
SHA-256 or SHA3-256
Raw evidence
```
"sha1",
```
Highsecp256k1 (Bitcoin curve)
src/ecdsa/curves.py:27
Raw evidence
```
"SECP256k1",
```
HighElliptic Curve Cryptography
src/ecdsa/test_ecdsa.py:17
Raw evidence
```
ellipticcurve,
```

+ 142 more findings in the full report

Scan your own repository

Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.

Start a free scan