bcgit/bc-csharp
text scan · 2,273 of 3,174 filesWhat was scanned
Scanner Shorstop 0.2.0 · text scan
Coverage 2,273 source files scanned of 3,174 in the repository; 738 skipped in test, vendored and build directories. What is excluded
Findings are starting points for investigation, not a security assessment. How scanning works
Total Cryptographic Assets
4719
Files Impacted
506
Quantum-Vulnerable Assets
39%
1823 of 4719
Deprecated after 2030, disallowed after 2035 — NIST IR 8547
Quantum-Safe Assets
29%
1361 of 4719
NIST-approved: FIPS 203 ML-KEM, 204 ML-DSA, 205 SLH-DSA
Quantum Readiness
Categories:
Post-Quantum Cryptography: NIST-approved PQC (Kyber, Dilithium, SPHINCS+)
Quantum-Safe Classical: Symmetric/hash with 256+ bit security (AES-256, SHA-256)
Quantum-Resistant Uncertain: Needs validation (AES-128, XMSS, some hash functions)
Quantum-Vulnerable: Broken by Shor's algorithm (RSA, ECDSA, DH)
Classically Weak: Broken TODAY (MD5, SHA-1, DES, RC4)
Unknown: Generic names, unidentifiable algorithms
By Algorithm Type
Algorithm Types:
Block Cipher: Symmetric encryption (AES, DES, ChaCha20)
Hash Function: One-way digest (SHA-256, MD5, BLAKE2)
Digital Signature: Asymmetric signing (RSA, ECDSA, Dilithium)
Message Authentication: MAC codes (HMAC, CMAC, Poly1305)
Key Derivation: KDF functions (PBKDF2, Argon2, HKDF)
Public Key Encryption: Asymmetric encryption (RSA, Kyber)
Public Key Cipher: Public key cryptography (RSA, ElGamal)
Key Exchange: Key agreement (ECDH, X25519, Kyber-KEM)
Authenticated Encryption: Combined encryption+MAC (AES-GCM, ChaCha20-Poly1305)
Extendable-Output Function: Variable-length output (SHAKE128, SHAKE256)
Other: Miscellaneous or unclassified algorithms
By Purpose
Purpose Types:
Encryption: Protect data confidentiality
Decryption: Recover original data
Digital Signing: Prove authenticity and integrity
Signature Verification: Validate digital signatures
Key Generation: Create cryptographic keys
Key Agreement: Establish shared secrets
Hashing: Generate message digests
Other: Miscellaneous or unclassified operations
Cryptographic Assets
Export
Cryptographic Bill of Materials (CycloneDX)
| Name | Primitive | Functions | File:Line | Risk |
|---|---|---|---|---|
| SHA-1-digest | hash | digest | crypto/src/asn1/bc/BCObjectIdentifiers.cs:21 | Classically weak |
| SHA-1-digest | hash | digest | crypto/src/asn1/bc/BCObjectIdentifiers.cs:38 | Classically weak |
| SHA-1-digest | hash | digest | crypto/src/asn1/bc/BCObjectIdentifiers.cs:40 | Classically weak |
| SHA-1-digest | hash | digest | crypto/src/asn1/bsi/BsiObjectIdentifiers.cs:56 | Classically weak |
| SHA-1-digest | hash | digest | crypto/src/asn1/cmp/DhbmParameter.cs:10 | Classically weak |
| DES-usage | other | N/A | crypto/src/asn1/cmp/DhbmParameter.cs:12 | Classically weak |
| 3DES-usage | other | N/A | crypto/src/asn1/cmp/DhbmParameter.cs:12 | Classically weak |
| SHA-1-digest | hash | digest | crypto/src/asn1/cmp/PbmParameter.cs:14 | Classically weak |
| DES-usage | other | N/A | crypto/src/asn1/cmp/PbmParameter.cs:21 | Classically weak |
| 3DES-usage | other | N/A | crypto/src/asn1/cmp/PbmParameter.cs:21 | Classically weak |
Page 1 of 472