REACT-CVE-2025-55182-Lab

Laboratorio CTF React-2025: CVE-2025-55182 Resumen Este repositorio contiene un laboratorio de Capture The Flag CTF diseñado estrictamente para fines educativos e investigación de seguridad. El entorno incluye una tienda de demostración vulnerable construida con Next.js 16 "Quantum Supplies",...

PrivateSphare

PrivateSphare PrivateSphare es una plataforma segura, anónima y de conocimiento cero para almacenar y compartir archivos. Permite a los usuarios subir archivos y recibir una frase de recuperación legible de 24 palabras. Sin cuentas, sin seguimiento y ningún dato sin cifrar toca nunca el...

CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction

CVE-2026-22020 – Semilla débil en la corrección de errores de distribución de claves cuánticas Código del programa Python qkdweakseed.py - Simulated QKD privacy amplification with weak seed import hashlib, os, time def privacyamplificationsiftedkey, seed: Weak: seed derived from current time,...

CVE-2026-22001-SPHINCS-WOTS-Weak-Randomness-Forgeable-Signature

CVE-2026-22001 – Falsificación de Firmas por Aleatoriedad Débil en WOTS+ de SPHINCS+ Resumen Una implementación del esquema de firmas post-cuánticas SPHINCS+ utiliza un generador de números aleatorios defectuoso durante la generación de firmas WOTS+. El mismo nonce k se reutiliza en múltiples...

camel-pqc-tls

TLS Post-Cuántico con Apache Camel Este repositorio contiene tres ejemplos que demuestran handshakes TLS 1.3 de Criptografía Post-Cuántica PQC con Apache Camel, utilizando el intercambio de claves híbrido X25519MLKEM768. X25519MLKEM768 combina el clásico X25519 Diffie-Hellman de curva elíptica co...

nexus-os

Nexus OS El Sistema Operativo de IA Agéntica Gobernado 66 Crates | 675 Comandos | 86 Páginas | 5,229 Pruebas | 10/10 OWASP | Cero Stubs Local-first. Aislable de red. Preparado para post-cuántico. Construido en Rust. Arquitectura | Inicio Rápido | Características | Estado de la Auditoría |...

CVE-2018-7848

CVE-2018-7848 Productos afectados Schneider Electric Modicon M580 Versión 2.90 Schneider Electric Modicon M340 Versión 3.10 Schneider Electric Modicon Premium Todas las versiones Schneider Electric Modicon Quantum Todas las versiones Referencias...

CVE-2018-7845

CVE-2018-7845 Productos afectados Schneider Electric Modicon M580 Versión 2.80 Schneider Electric Modicon M340 Versión 3.01 Schneider Electric Modicon Premium Versión 3.20 Schneider Electric Modicon Quantum Versión 3.60 Referencias https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

ejbca-pqc-lab

Laboratorio PQC Puro con EJBCA — Jerarquía PKI de Dos Niveles ML-DSA-65 Una implementación práctica de NIST FIPS 204 ML-DSA en una jerarquía PKI de dos niveles utilizando EJBCA Community Edition. 📖 Guía completa: Construyendo una PKI Post-Cuántica: Cómo firmé una CA Raíz y una CA Subordinada usan...

QUFIG: GNN-Based Prediction of Quantum Fault Injection Vulnerabilities with Gate-Level Precision

The growing scale and accessibility of quantum hardware exposed new reliability and security challenges in the quantum computing workflow, such as the run-time fault injection attacks in cloud-based quantum computing platforms. However, existing works fail to identify vulnerabilities with...

Learnt Attacks on Quantum Key Distribution under Channel Noise and Device Drift

Quantum key distribution QKD links are provisioned from security analyses of stationary channels, whereas the devices that determine the channel drift between recalibrations. Whether an eavesdropper who cannot alter the channel's own noise gains by following that drift has not been quantified...

Quantum Secret Sharing and Error Correction Vs No-Cloning

Secret sharing is ubiquitous throughout cryptography. All possible access structures are classically feasible, and in the case of threshold access structures, the protocols are even very efficient. However, when moving to the quantum setting, the no-cloning theorem shows that many access structur...

On Evaluating Quantum Kernel Robustness for Low-Resource Cross-Corpus Audio Deepfake Detection

Synthetic speech detection is critical for audio security, but performance can degrade when labeled data are scarce and evaluation conditions differ from training. This study examines quantum kernel methods and lightweight neural models for cross-corpus audio deepfake detection under limited...

Semi-Quantum Cryptography with Certified Deletion

Certified deletion allows a client to upload encrypted data to a server as a quantum state, then later request that the server delete their data and detect whether the server complies. If verification passes, then the data on the server will remain hidden even if the decryption key is later leake...

Breaking the Bounded Entanglement Barrier for Quantum Position Verification

Position verification, introduced by Chandran et al. SIAM J. Computing 2014, allows verifiers to test a prover's claimed position by an interactive protocol. Classical position verification is impossible. Even for Quantum Position Verification QPV, there always exists an LOCC Local Operations and...

Certified Randomness with Optimal Rate

The generation of certified random bits is an emerging near-term application of quantum computers. Potential applications, such as randomness beacons and CRS generation, require nearly uniform randomness, whose rate the ratio of min-entropy to bitlength is 1. However, existing protocols for...

CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1731432106)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1731432106 advisory. - A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagic...

CVE-2026-102824

A flaw was found in russh. The library fails to validate peer public keys during hybrid cryptographic key exchange, accepting an all-zero key. A remote attacker acting as a malicious Secure Shell SSH peer can exploit this flaw during connection negotiation to force the classical encryption...

cryptoptic

cryptoptic Find the cryptography hiding in your code before quantum computers find it for you. cryptoptic uses CodeQL and GitHub Actions to scan a repository or an entire GitHub organisation and produce an inventory of every cryptographic function in use, the library it comes from, and where it i...

LR-WebPKI

LR+ WebPKI Evaluation Artifact This package contains the finalized LR+ reference implementation, production reconstruction wrappers, tests, and generated evaluation outputs for context-closed post-quantum authentication over WebPKI CA context. The package is intentionally written as a submission...