Remote Services Using Post-Quantum Ciphers

#TRUSTED 43f56ce3190061fbd5f2d9bfc172f78709e77f10821b1902e595193f656289f0d88aa4c3732d1d3321ba6031b8474c70b33475c515a9d7f213b162fd0834afaa651c2a6b58c6079ef52479e36b67a4f938ea08dc2fe1d1802fab0d178e05e7081803c5bdeb6a0e45b318c373be6aabace073d3a1ce17eea05be3398270f70ed2669710ba0cc1543b1efc0eb8671475bb6e0498fb4dc9d037e74a10114439d7adb2bb496280213cacc4b3766c02866f8b224548a614a77e89e15ed86c193898f9e73ee7825f8b03de6f9e83e1a20e3e60a89323fe3154f67e446d1a8840587530dbbc019e25bd09fa8402e0c801a3d4bc0149b39fbe51e9437bde04803deee5596c62c4ffd0d8dd734422396bebabf2457b53ba6ff07497be5ea1da77ee3de78fb133b27c92c07fe80943dc5f5178675f8d86c937aea7082c9e2306397cf35f0730c21dd84ba811165f998a89b316eec530a61d14d5a172f0033ba62fffe60af66d46fb4b40fcf43a2cbd2f235a71ff4131b8951ef6b12d6f9d5f0590c4033a9eb96730efcfcf48726886f089c0a10779648a5678c9f4c6786d4e3669cd29a75b53f13fdcb1bc23bdfecee715182d91b51cc2ff31ce8e69a2d86b6e3de2fec2d33d1ab7c9420292ce2c09ca65ac8398873b35a3bdfa1ea784bbff44698d718dee8690dfa713644a243774087c330c404e918e33bc8e9d0b0ce456d45c7eb36372
#TRUST-RSA-SHA256 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
#%NASL_MIN_LEVEL 80900
#TRUST-RSA-SHA256
#
# (C) Tenable Network Security, Inc.
#

include('compat.inc');

if (description)
{
  script_id(277653);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/12/08");

  script_name(english:"Remote Services Using Post-Quantum Ciphers");

  script_set_attribute(attribute:"synopsis", value:
"Reports remote services that offer post-quantum ciphers.");
  script_set_attribute(attribute:"description", value:
"This plugin reports network services that offer post-quantum
ciphers and enumerates the post-quantum ciphers that they
offer.  Tenable makes no attempt to determine whether the
remote service is actually hardened against a post-quantum
attack.");

  script_set_attribute(attribute:"solution", value:"n/a");
  script_set_attribute(attribute:"risk_factor", value:"None");
  # https://www.nist.gov/news-events/news/2024/08/nist-releases-first-3-finalized-post-quantum-encryption-standards
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?7a390f87");
  # https://www.ietf.org/archive/id/draft-kwiatkowski-pquip-pqc-migration-00.html
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?ad7d6b3b");
  # https://www.rd.ntt/e/research/JN202305_21871.html
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?1c0c61e0");
  # https://ntruprime.cr.yp.to/ntruprime-20170816.pdf
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?5eec4b28");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/12/08");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"General");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("target_cipher_inventory.nasl");

  exit(0);
}

var report;
var reported = FALSE;

var pqc_kbs = get_kb_list("Host/PQC/*/*/hardened");
var pqc_kb, kb_parts;
var port, proto;
var report_ciphers;
var type, ciphers, cipher;

for(pqc_kb in pqc_kbs)
{
  report = "";
  kb_parts = split(pqc_kb - "Host/PQC/", sep:"/", keep:FALSE);
  port = int(kb_parts[0]);
  proto = kb_parts[1];

  report_ciphers = deserialize(pqc_kbs[pqc_kb]);
  for(type in report_ciphers)
  {
    report += '\n\n' + type;
    ciphers = report_ciphers[type];
    for(cipher in ciphers)
      report += '\n\t' + cipher;
  }

  report = "The target " + proto + " server offers the following post-quantum ciphers:" + report;
  reported = TRUE;
  security_report_v4(port:port, severity:SECURITY_NOTE, extra:report);
}

if(!reported)
  exit(0, "The target has no services that offer post-quantum ciphers.");