kxco-pq-scan 1.3.0 → 1.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/package.json +1 -1
- package/src/catalogue.js +6 -4
package/README.md
CHANGED
|
@@ -203,7 +203,7 @@ primitives where the runtime provides them.
|
|
|
203
203
|
| Instead of | Look at |
|
|
204
204
|
|---|---|
|
|
205
205
|
| HMAC or RSA-signed webhooks | [`kxco-post-quantum-webhook`](https://www.npmjs.com/package/kxco-post-quantum-webhook) |
|
|
206
|
-
| An ECDH-secured channel | [`kxco-pq-tls`](https://www.npmjs.com/package/kxco-pq-tls), ML-KEM-
|
|
206
|
+
| An ECDH-secured channel | [`kxco-pq-tls`](https://www.npmjs.com/package/kxco-pq-tls), ML-KEM-1024 with X25519 by default, ML-KEM-768 available |
|
|
207
207
|
| RSA or ECDSA document signing | [`kxco-pq-attest`](https://www.npmjs.com/package/kxco-pq-attest) |
|
|
208
208
|
| Keys in an HSM | [`kxco-pq-hsm`](https://www.npmjs.com/package/kxco-pq-hsm) |
|
|
209
209
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "kxco-pq-scan",
|
|
3
|
-
"version": "1.3.
|
|
3
|
+
"version": "1.3.1",
|
|
4
4
|
"description": "Find quantum-vulnerable cryptography in a JavaScript dependency tree in seconds and emit a CycloneDX 1.6 CBOM. Separates what Shor's algorithm breaks from what Grover's only weakens, recognises hybrid constructions, and names who pulled each finding in.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"post-quantum",
|
package/src/catalogue.js
CHANGED
|
@@ -62,10 +62,12 @@ export const CATALOGUE = {
|
|
|
62
62
|
// --- post-quantum --------------------------------------------------------
|
|
63
63
|
'@noble/post-quantum': { classes: ['pq'], algorithms: ['ML-KEM', 'ML-DSA', 'SLH-DSA'] },
|
|
64
64
|
'kxco-post-quantum': { classes: ['pq'], algorithms: ['ML-KEM', 'ML-DSA', 'SLH-DSA'] },
|
|
65
|
-
'kxco-pq-tls': { classes: ['pq', 'broken'], algorithms: ['ML-KEM-768', 'X25519'],
|
|
66
|
-
note: 'X25519 is the classical half of a deliberate hybrid' },
|
|
67
|
-
'kxco-pq-attest': { classes: ['pq'], algorithms: ['ML-DSA-65'] },
|
|
68
|
-
'kxco-pq-hsm': { classes: ['pq'], algorithms: ['ML-DSA-65', 'ML-KEM-768'] },
|
|
65
|
+
'kxco-pq-tls': { classes: ['pq', 'broken'], algorithms: ['ML-KEM-1024', 'ML-KEM-768', 'X25519'],
|
|
66
|
+
note: 'ML-KEM-1024 with X25519 by default from 2.0.0, ML-KEM-768 available; X25519 is the classical half of a deliberate hybrid' },
|
|
67
|
+
'kxco-pq-attest': { classes: ['pq'], algorithms: ['ML-DSA-87', 'ML-DSA-65'] },
|
|
68
|
+
'kxco-pq-hsm': { classes: ['pq'], algorithms: ['ML-DSA-87', 'ML-DSA-65', 'ML-KEM-1024', 'ML-KEM-768'] },
|
|
69
|
+
'kxco-pq-vault': { classes: ['pq'], algorithms: ['ML-KEM-1024', 'ML-KEM-768'],
|
|
70
|
+
note: 'ML-KEM-1024 by default from 1.4.0; ML-KEM-768 envelopes still decrypt' },
|
|
69
71
|
'kxco-pq-sdk': { classes: ['pq'], algorithms: ['ML-DSA-65', 'ML-DSA-87', 'ML-KEM-768', 'ML-KEM-1024'] },
|
|
70
72
|
'liboqs-node': { classes: ['pq'], algorithms: ['ML-KEM', 'ML-DSA'] },
|
|
71
73
|
'pqclean': { classes: ['pq'], algorithms: ['ML-KEM', 'ML-DSA'] },
|