Skip to content
QuantumScanReporte público de escaneo

Repositorio

jpadilla/pyjwt

Escaneado el 11 may 2026

73

Puntuación de riesgo/ 100

Riesgo alto

Resumen

PyJWT library exhibits high quantum vulnerability with 95 instances of quantum-susceptible algorithms including RSA, ECDSA (NIST P-256/384/521), and Ed25519. As a widely-used JWT implementation library, migration to post-quantum cryptography is critical to protect token integrity against future quantum attacks. The library's core cryptographic infrastructure requires comprehensive redesign to support NIST-approved PQC algorithms.

Crítico

0

Alto

95

Medio

0

Bajo

2

Hallazgos principales

  • AltoNIST P-521 curve

    jwt/algorithms.py:162

  • AltoECDSA

    jwt/api_jwk.py:45

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

  • AltoRSA

    tests/keys/__init__.py:48

    ML-KEM (CRYSTALS-Kyber) for key encapsulation

  • AltoECDSA

    tests/test_api_jws.py:218

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

  • AltoPKCS#1 (RSA-based)

    tests/test_algorithms.py:80

+ 92 hallazgos más en el reporte completo

Escanea tu propio repositorio

Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.

Iniciar un escaneo gratis