mwiede/jsch

Escaneado el 4 jun 2026

Puntuación de riesgo/ 100

Riesgo alto

Resumen

The JSch library has critical quantum vulnerability exposure across 33 files with 206 total findings. The codebase extensively uses quantum-vulnerable algorithms including RSA, ECDSA, and DSA, with particular concern around hardcoded weak key sizes (1024-bit RSA) and deprecated ciphers (3DES, Blowfish). Immediate migration planning to NIST-approved post-quantum cryptography standards is essential to maintain security in the quantum era.

Crítico

Alto

165

Medio

Bajo

Hallazgos principales

Crítico3DES / TripleDES

examples/ScpToNoneCipher.java:50

Evidencia

session.setConfig("cipher.c2s", "none,aes128-cbc,3des-cbc,blowfish-cbc");

CríticoRSA key ≤ 2048 bits
src/main/java/com/jcraft/jsch/AgentProxy.java:128
Evidencia
```
} else if (alg.equals("rsa-sha2-512")) {
```
CríticoRSA key ≤ 2048 bits
src/main/java/com/jcraft/jsch/ChannelAgentForwarding.java:210
Evidencia
```
signature = identity.getSignature(data, "rsa-sha2-512");
```
CríticoRSA key ≤ 2048 bits
src/main/java/com/jcraft/jsch/OpenSshCertificateKeyTypes.java:31
Evidencia
```
* RSA certificate key type using SHA-512 for the host key signature.
```
CríticoRSA key ≤ 2048 bits
src/main/java/com/jcraft/jsch/OpenSshCertificateKeyTypes.java:33
Evidencia
```
static final String RSA_SHA2_512_CERT_V01 = "rsa-sha2-512-cert-v01@openssh.com";
```

+ 195 hallazgos más en el reporte completo

Escanea tu propio repositorio

Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.

Iniciar un escaneo gratis