golang/crypto

Escaneado el 13 may 2026

Puntuación de riesgo/ 100

Riesgo alto

Resumen

The golang/crypto repository contains critical cryptographic vulnerabilities including the use of broken RC2 cipher and quantum-vulnerable Ed25519 signature algorithms. These findings pose significant risks to long-term data confidentiality and authentication integrity in a post-quantum threat landscape.

Crítico

Alto

Medio

Bajo

Hallazgos principales

CríticoRC2
pkcs12/internal/rc2/bench_test.go:5
Evidencia
```
package rc2
```
AltoEd25519 / EdDSA
ed25519/ed25519_test.go:8
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA
Evidencia
```
ed25519std "crypto/ed25519"
```
AltoEd25519 / EdDSA
ed25519/ed25519_test.go:18
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA
Evidencia
```
sig := ed25519.Sign(private, message)
```
AltoEd25519 / EdDSA
ed25519/ed25519_test.go:19
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA
Evidencia
```
if !ed25519.Verify(public, message, sig) {
```
AltoEd25519 / EdDSA
ed25519/ed25519_test.go:11
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA
Evidencia
```
"golang.org/x/crypto/ed25519"
```

Escanea tu propio repositorio

Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.

Iniciar un escaneo gratis