NTPsec/ntpsec

Escaneado el 22 may 2026

Puntuación de riesgo/ 100

Riesgo moderado

Resumen

NTPsec repository contains 29 instances of quantum-vulnerable cryptographic primitives, primarily concentrated in legacy 'attic' code. While most critical findings (DES, MD5, SHA-1) exist in deprecated testing utilities rather than production code, the presence of DSA and Ed25519 in timing tests indicates awareness of algorithms that will fail against quantum attacks. The codebase shows reliance on older OpenSSL versions lacking post-quantum readiness.

Crítico

Alto

Medio

Bajo

Hallazgos principales

CríticoSHA-1
contrib/make-leap-seconds.py:76
SHA-256 or SHA3-256
Evidencia
```
sha1.update(expire)
```
CríticoSHA-1
contrib/make-leap-seconds.py:79
SHA-256 or SHA3-256
Evidencia
```
digest = sha1.hexdigest()
```
CríticoSHA-1
attic/digest-find.c:41
SHA-256 or SHA3-256
Evidencia
```
"SHA1",
```
CríticoSHA-1
attic/digest-find.c:42
SHA-256 or SHA3-256
Evidencia
```
"sha1",
```
CríticoDES
attic/digest-find.c:51
Evidencia
```
"DES", "DES3",
```

+ 24 hallazgos más en el reporte completo

Escanea tu propio repositorio

Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.

Iniciar un escaneo gratis