tlsfuzzer/python-ecdsa

Escaneado el 11 may 2026

Puntuación de riesgo/ 100

Riesgo crítico

Resumen

This repository implements ECDSA cryptographic signatures, which are fundamentally vulnerable to quantum attacks via Shor's algorithm. The library contains 143 high-severity quantum-vulnerable findings across elliptic curve implementations, plus critical usage of broken hash functions (SHA-1, MD5) that compound the security risks. Immediate migration planning to post-quantum cryptography is essential for any production deployments.

Crítico

Alto

143

Medio

Bajo

Hallazgos principales

CríticoMD5
src/ecdsa/test_malformed_sigs.py:9
SHA3-256 or SHA-256
Evidencia
```
"md5",
```
CríticoSHA-1
src/ecdsa/rfc6979.py:50
SHA-256 or SHA3-256
Evidencia
```
hash, like :py:class:`hashlib.sha1`
```
CríticoSHA-1
src/ecdsa/test_malformed_sigs.py:10
SHA-256 or SHA3-256
Evidencia
```
"sha1",
```
Altosecp256k1 (Bitcoin curve)
src/ecdsa/curves.py:27
Evidencia
```
"SECP256k1",
```
AltoElliptic Curve Cryptography
src/ecdsa/test_ecdsa.py:17
Evidencia
```
ellipticcurve,
```

+ 142 hallazgos más en el reporte completo

Escanea tu propio repositorio

Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.

Iniciar un escaneo gratis