square/okhttp

Escaneado em 4 de jun. de 2026

Risk score/ 100

Risco alto

Resumo

The OkHttp repository contains quantum-vulnerable cryptographic implementations in its TLS certificate management module. RSA and Elliptic Curve Cryptography are extensively used for certificate generation and key handling, which will become insecure against quantum computing attacks. While these appear to be primarily in testing and utility code rather than core TLS handshake logic, migration planning is essential for long-term security.

Crítico

Alto

Médio

Baixo

Principais findings

AltoPKCS#1 (RSA-based)
okhttp-tls/src/test/java/okhttp3/tls/HeldCertificateTest.kt:186
Evidência
```
|-----BEGIN RSA PRIVATE KEY-----
```
AltoRSA
okhttp-tls/src/main/kotlin/okhttp3/tls/HeldCertificate.kt:30
ML-KEM (CRYSTALS-Kyber) for key encapsulation
Evidência
```
import java.security.interfaces.RSAPrivateKey
```
AltoRSA
okhttp-tls/src/main/kotlin/okhttp3/tls/HeldCertificate.kt:31
ML-KEM (CRYSTALS-Kyber) for key encapsulation
Evidência
```
import java.security.interfaces.RSAPublicKey
```
AltoElliptic Curve Cryptography
okhttp-tls/src/main/kotlin/okhttp3/tls/HeldCertificate.kt:29
Evidência
```
import java.security.interfaces.ECPublicKey
```
AltoRSA
okhttp-tls/src/main/kotlin/okhttp3/tls/HeldCertificate.kt:176
ML-KEM (CRYSTALS-Kyber) for key encapsulation
Evidência
```
check(keyPair.private is RSAPrivateKey) { "PKCS1 only supports RSA keys" }
```

+ 2 findings no relatório completo

Escaneie seu próprio repositório

Grátis. Resultados em ~90 segundos. CBOM + PDF DORA/NIS2 inclusos.

Começar scan grátis