Skip to content
QuantumScanReporte público de escaneo

Repositorio

quantumscan-io/scanner-core

Escaneado el 26 jun 2026

18

Puntuación de riesgo/ 100

Limpio

Resumen

This repository contains 44 high-severity findings and 4 medium-severity findings, all located in test files for a cryptographic pattern scanner. All detections are test patterns rather than production cryptographic implementations. Since these are test fixtures documenting Substrate/Polkadot quantum-vulnerable patterns (sr25519, ed25519, ECDSA, X25519), they represent documentation of risk rather than actual cryptographic vulnerabilities in deployed code.

Crítico

0

Alto

44

Medio

4

Bajo

0

Hallazgos principales

  • AltoCWE-327Ed25519 / EdDSA

    test/substrate-patterns.test.js:13

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA

    Evidencia
    *   5. schnorrkel / ed25519-dalek / x25519-dalek / libp2p-noise
  • AltoCWE-327Ed25519 / EdDSA

    test/substrate-patterns.test.js:24

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA

    Evidencia
    re: /GrandpaId|grandpa_generate_session_keys|ed25519::(?:Public|Pair|Signature)\b|GrandpaAuthorityId|AuthorityList.*grandpa|GrandpaKeyType|GRANDPA_ENGINE_ID/i },
  • AltoSubstrate Session Keys (multi-key)

    test/substrate-patterns.test.js:26

    Await Polkadot PQC session key migration RFC

    Evidencia
    re: /impl_opaque_keys!\s*\{|SessionKeys\s*\{[^}]*(?:babe|grandpa|im_online|authority_discovery)|generate_session_keys|decode_session_keys/i },
  • AltoSubstrate Validator Keystore

    test/substrate-patterns.test.js:28

    Monitor substrate-crypto PQC keystore RFC

    Evidencia
    re: /KeystorePtr|SyncCryptoStorePtr|LocalKeystore::open|keystore\.(?:sr25519_generate_new|ed25519_generate_new|ecdsa_generate_new)|sp_keystore|CryptoStore/i },
  • AltoCWE-327ECDSA

    test/substrate-patterns.test.js:30

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

    Evidencia
    re: /sp_runtime::traits::Verify|MultiSignature|AnySignature|sp_core::(?:sr25519|ed25519|ecdsa)::Signature|(?:Sr25519|Ed25519|Ecdsa)Signature\b/i },

+ 43 hallazgos más en el reporte completo

Escanea tu propio repositorio

Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.

Iniciar un escaneo gratis