Repositorio
lightningnetwork/lnd
Escaneado el 5 jun 2026
Puntuación de riesgo/ 100
Riesgo alto
Resumen
The Lightning Network Daemon (lnd) relies heavily on quantum-vulnerable elliptic curve cryptography (ECDSA, secp256k1, ECDH) across critical components including node authentication, channel establishment, and payment routing. One critical finding involves the use of the obsolete 3DES cipher in TLS configuration. The pervasive use of Bitcoin's secp256k1 curve throughout the codebase poses significant quantum computing risks that could compromise channel funds and node identities when large-scale quantum computers become available.
1
18
0
0
Hallazgos principales
- Crítico3DES / TripleDES
cert/tls.go:14
- Altosecp256k1 (Bitcoin curve)
brontide/fuzz_test.go:14
- AltoECDSA
brontide/fuzz_test.go:111
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)
- Altosecp256k1 (Bitcoin curve)
brontide/fuzz_test.go:116
- Altosecp256k1 (Bitcoin curve)
brontide/noise.go:26
+ 14 hallazgos más en el reporte completo
Escanea tu propio repositorio
Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.