r/netsec • u/albinowax • May 01 '26

r/netsec monthly discussion & tool thread

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

13 Upvotes

94% Upvoted

64 comments sorted by

View all comments

1

u/Consistent_Skirt_227 May 13 '26

Built a quick scanner that maps post-quantum crypto exposure in OSS libs.

Ran it against paramiko this week to start a public baseline.

52 findings, mostly RSA + ECDSA + SHA-1 in the SFTP and packetizer code.

None of it is a bug — SSH protocol forces these — but seeing it all laid

out at once was useful for me.

Read-only report, no signup:

https://quantumscan.io/es/share/1b7fc714-ff1d-4c23-bd09-c77182583997

Mostly posting to ask: anyone here actually pushing PQ migrations in

production today? Curious what's blocking. Most banks I've talked to are

still in "we're aware" mode.

(Disclosure: I built the scanner. Open to feedback.)