Skip to content
QuantumScanPublic scan report

Repository

mwiede/jsch

Scanned on Jun 4, 2026

78

Risk score/ 100

High risk

Summary

The JSch library has critical quantum vulnerability exposure across 33 files with 206 total findings. The codebase extensively uses quantum-vulnerable algorithms including RSA, ECDSA, and DSA, with particular concern around hardcoded weak key sizes (1024-bit RSA) and deprecated ciphers (3DES, Blowfish). Immediate migration planning to NIST-approved post-quantum cryptography standards is essential to maintain security in the quantum era.

Critical

30

High

165

Medium

5

Low

0

Top findings

  • Critical3DES / TripleDES

    examples/ScpToNoneCipher.java:50

  • CriticalRSA key ≤ 2048 bits

    src/main/java/com/jcraft/jsch/AgentProxy.java:128

  • CriticalRSA key ≤ 2048 bits

    src/main/java/com/jcraft/jsch/ChannelAgentForwarding.java:210

  • CriticalRSA key ≤ 2048 bits

    src/main/java/com/jcraft/jsch/OpenSshCertificateKeyTypes.java:31

  • CriticalRSA key ≤ 2048 bits

    src/main/java/com/jcraft/jsch/OpenSshCertificateKeyTypes.java:33

+ 195 more findings in the full report

Scan your own repository

Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.

Start a free scan