zeroclaw-labs/zeroclaw

Escaneado em 26 de jun. de 2026

Risk score/ 100

Risco moderado

Resumo

The repository uses AES-128 in ECB mode for WeChat channel encryption. Grover's algorithm reduces AES-128 effective security to 64 bits, making it quantum-vulnerable. Additionally, ECB mode is cryptographically weak even against classical attackers due to lack of semantic security.

Crítico

Alto

Médio

Baixo

Principais findings

MédioCWE-326AES-128
crates/zeroclaw-channels/src/wechat.rs:73
AES-256
Evidência
```
type Aes128EcbEnc = ecb::Encryptor<aes::Aes128>;
```
MédioCWE-326AES-128
crates/zeroclaw-channels/src/wechat.rs:74
AES-256
Evidência
```
type Aes128EcbDec = ecb::Decryptor<aes::Aes128>;
```

Escaneie seu próprio repositório

Grátis. Resultados em ~90 segundos. CBOM + PDF DORA/NIS2 inclusos.

Começar scan grátis