aws/s2n-tls

Escaneado em 4 de jun. de 2026

Risk score/ 100

Risco alto

Resumo

The aws/s2n-tls repository contains 62 critical and 156 high-severity quantum-vulnerable cryptographic implementations across 44 files. MD5, SHA-1, and SSLv2/SSLv3 protocols pose immediate security risks, while extensive use of ECDSA, RSA-PKCS#1, and elliptic curve cryptography (P-256, P-384, P-521, X25519) creates significant post-quantum vulnerability. Migration to NIST-approved PQC algorithms is essential for long-term cryptographic resilience.

Crítico

Alto

138

Médio

Baixo

Principais findings

CríticoSSLv2 / SSLv3

crypto/s2n_hmac.c:136

Evidência

case S2N_HMAC_SSLv3_SHA1: *xor_pad_size = 40;   break;

CríticoMD5

api/unstable/fingerprint.h:169

SHA3-256 or SHA-256

Evidência

* Currently the only type supported is S2N_FINGERPRINT_JA3, which uses MD5 and

CríticoSSLv2 / SSLv3

crypto/s2n_hmac.c:135

Evidência

case S2N_HMAC_SSLv3_MD5:  *xor_pad_size = 48;   break;

CríticoSSLv2 / SSLv3

crypto/s2n_hmac.c:78

Evidência

static int s2n_sslv3_mac_init(struct s2n_hmac_state *state, s2n_hmac_algorithm alg, const void *key, uint32_t klen)

CríticoSSLv2 / SSLv3
bindings/rust/extended/s2n-tls/src/enums.rs:95
Evidência
```
s2n_tls_version::SSLV3 => Self::SSLV3,
```

+ 195 findings no relatório completo

Escaneie seu próprio repositório

Grátis. Resultados em ~90 segundos. CBOM + PDF DORA/NIS2 inclusos.

Começar scan grátis