golang/crypto

Escaneado em 4 de jun. de 2026

Risk score/ 100

Risco alto

Resumo

The golang/crypto repository contains widespread use of quantum-vulnerable cryptographic algorithms across 58 files with 315 total findings. Critical issues include broken algorithms (MD5, SHA-1) in 60 instances and quantum-vulnerable primitives (ECDSA, RSA, ECDH) in 234 instances. Immediate migration to NIST-approved post-quantum algorithms is required for compliance with emerging regulations.

Crítico

Alto

140

Médio

Baixo

Principais findings

CríticoMD5
ocsp/ocsp_test.go:249
SHA3-256 or SHA-256
CríticoMD5
ocsp/ocsp_test.go:252
SHA3-256 or SHA-256
CríticoSHA-1
ocsp/ocsp_test.go:260
SHA-256 or SHA3-256
CríticoSHA-1
openpgp/clearsign/clearsign_test.go:256
SHA-256 or SHA3-256
CríticoMD5
openpgp/s2k/s2k.go:239
SHA3-256 or SHA-256

+ 195 findings no relatório completo

Escaneie seu próprio repositório

Grátis. Resultados em ~90 segundos. CBOM + PDF DORA/NIS2 inclusos.

Começar scan grátis