Skip to content

pqconnect

Directory actions

More options

Directory actions

More options

Latest commit

 

History

History

pqconnect

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
001-ephemeral-key-responses-ignore-udp-source.md
001-ephemeral-key-responses-ignore-udp-source.md
 
 
001-ephemeral-key-responses-ignore-udp-source.patch
001-ephemeral-key-responses-ignore-udp-source.patch
 
 
002-unauthenticated-fail-packet-removes-active-peer.md
002-unauthenticated-fail-packet-removes-active-peer.md
 
 
002-unauthenticated-fail-packet-removes-active-peer.patch
002-unauthenticated-fail-packet-removes-active-peer.patch
 
 
003-timestamp-keyed-replay-cache-forgets-same-second-ciphertexts.md
003-timestamp-keyed-replay-cache-forgets-same-second-ciphertexts.md
 
 
003-timestamp-keyed-replay-cache-forgets-same-second-ciphertexts.patch
003-timestamp-keyed-replay-cache-forgets-same-second-ciphertexts.patch
 
 
005-forged-cookie-checks-exhaust-epoch-nonce-counter.md
005-forged-cookie-checks-exhaust-epoch-nonce-counter.md
 
 
005-forged-cookie-checks-exhaust-epoch-nonce-counter.patch
005-forged-cookie-checks-exhaust-epoch-nonce-counter.patch
 
 
README.md
README.md
 
 

README.md

PQConnect Audit Findings

Security audit of PQConnect, a post-quantum VPN that authenticates and encrypts traffic between hosts using McEliece and X25519. Each finding includes a detailed write-up and a patch.

Summary

Total findings: 4 -- High: 1, Medium: 3

Findings

Handshake and peer management

# Finding Severity
001 Ephemeral key responses ignore UDP source Medium
002 Unauthenticated fail packet removes active peer Medium

0-RTT replay protection

# Finding Severity
003 Timestamp-keyed replay cache forgets same-second ciphertexts High

Cookie management

# Finding Severity
005 Forged cookie checks exhaust epoch nonce counter Medium