quantumscan-io/scanner-core

Escaneado em 26 de jun. de 2026

Risk score/ 100

Limpo

Resumo

This repository contains test fixtures for detecting quantum-vulnerable cryptography patterns in Substrate/Polkadot blockchain code. All 48 findings are located in test files that validate scanner detection capabilities, not production cryptographic implementations. No actual cryptographic operations are performed.

Crítico

Alto

Médio

Baixo

Principais findings

AltoBABE Authority Key (sr25519)
test/substrate-patterns.test.js:22
ML-DSA (CRYSTALS-Dilithium) via sp-core PQC extension when standardized
Evidência
```
re: /BabeId|babe_generate_session_keys|sr25519::(?:Public|Pair|Signature)\b|app_crypto!\s*\(.*sr25519|BabeAuthorityId|BabeKeyType/i },
```

AltoSubstrate Session Keys (multi-key)

test/substrate-patterns.test.js:26

Await Polkadot PQC session key migration RFC

Evidência

re: /impl_opaque_keys!\s*\{|SessionKeys\s*\{[^}]*(?:babe|grandpa|im_online|authority_discovery)|generate_session_keys|decode_session_keys/i },

AltoSubstrate Validator Keystore

test/substrate-patterns.test.js:28

Monitor substrate-crypto PQC keystore RFC

Evidência

re: /KeystorePtr|SyncCryptoStorePtr|LocalKeystore::open|keystore\.(?:sr25519_generate_new|ed25519_generate_new|ecdsa_generate_new)|sp_keystore|CryptoStore/i },

AltoCWE-327ECDSA

test/substrate-patterns.test.js:30

ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

Evidência

re: /sp_runtime::traits::Verify|MultiSignature|AnySignature|sp_core::(?:sr25519|ed25519|ecdsa)::Signature|(?:Sr25519|Ed25519|Ecdsa)Signature\b/i },

AltoCWE-327ECDSA

test/substrate-patterns.test.js:32

ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

Evidência

re: /sp_core::crypto::|sp_core::(?:sr25519|ed25519|ecdsa)::|use sp_core::(?:Pair|Public|Signature)|frame_support::crypto::|CryptoTypePublicPair/i },

+ 43 findings no relatório completo

Escaneie seu próprio repositório

Grátis. Resultados em ~90 segundos. CBOM + PDF DORA/NIS2 inclusos.

Começar scan grátis