quantumscan-io/scanner-core

Escaneado el 26 jun 2026

Puntuación de riesgo/ 100

Limpio

Resumen

This repository contains a post-quantum cryptography scanner tool with 44 high-severity detections, but all findings are located exclusively in test files (substrate-patterns.test.js) that define detection patterns for Substrate/Polkadot blockchain cryptographic primitives. No production code uses quantum-vulnerable algorithms; the repository implements a security scanner, not vulnerable cryptography.

Crítico

Alto

Medio

Bajo

Hallazgos principales

AltoCWE-327X25519 / Curve25519
test/substrate-patterns.test.js:55
ML-KEM (CRYSTALS-Kyber)
Evidencia
```
{ id: "substrate-x25519-dalek",
```

AltoCWE-327secp256k1 (Bitcoin curve)

index.js:68

Evidencia

{ id: "ethers-wallet",       name: "ethers.js Wallet (secp256k1)",

AltoCWE-327Ed25519 / EdDSA
test/substrate-patterns.test.js:13
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA
Evidencia
```
*   5. schnorrkel / ed25519-dalek / x25519-dalek / libp2p-noise
```
AltoBABE Authority Key (sr25519)
test/substrate-patterns.test.js:22
ML-DSA (CRYSTALS-Dilithium) via sp-core PQC extension when standardized
Evidencia
```
re: /BabeId|babe_generate_session_keys|sr25519::(?:Public|Pair|Signature)\b|app_crypto!\s*\(.*sr25519|BabeAuthorityId|BabeKeyType/i },
```

AltoCWE-327Ed25519 / EdDSA

test/substrate-patterns.test.js:24

ML-DSA (CRYSTALS-Dilithium) or SLH-DSA

Evidencia

re: /GrandpaId|grandpa_generate_session_keys|ed25519::(?:Public|Pair|Signature)\b|GrandpaAuthorityId|AuthorityList.*grandpa|GrandpaKeyType|GRANDPA_ENGINE_ID/i },

+ 43 hallazgos más en el reporte completo

Escanea tu propio repositorio

Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.

Iniciar un escaneo gratis