Search results

[SECURITY] MQTT: Unauthenticated key distribution (MITM Vulnerability)

bugSomething isn't workingSomething isn't working

criticalDanger DangerDanger Danger

mqtt

security

Status: Open.

#14 In doomhammerhell/pqc-iiot;

· doomhammerhell opened on Mar 6, 2026

[BUG] Ratchet: KEM step is non-functional (Broken PCS)

bugSomething isn't workingSomething isn't working

criticalDanger DangerDanger Danger

ratchet

security

Status: Open.

#13 In doomhammerhell/pqc-iiot;

· doomhammerhell opened on Mar 6, 2026

[BUG] Ratchet: Header metadata is not authenticated (DoS/Desync Risk)

bugSomething isn't workingSomething isn't working

criticalDanger DangerDanger Danger

ratchet

security

Status: Open.

#12 In doomhammerhell/pqc-iiot;

· doomhammerhell opened on Mar 6, 2026

[SECURITY] Key Provider: Secret Keys (SKs) stored in plaintext

bugSomething isn't workingSomething isn't working

criticalDanger DangerDanger Danger

cryptography

security

Status: Open.

#11 In doomhammerhell/pqc-iiot;

· doomhammerhell opened on Mar 6, 2026

[BUG] FOTA: Manifest signature excludes chunk hashes and size (Integrity Risk)

bugSomething isn't workingSomething isn't working

criticalDanger DangerDanger Danger

fota

security

Status: Open.

#10 In doomhammerhell/pqc-iiot;

· doomhammerhell opened on Mar 6, 2026

[BUG] Attestation: Quote verification uses swapped parameters (Broken Chain of Trust)

attestation

bugSomething isn't workingSomething isn't working

criticalDanger DangerDanger Danger

security

Status: Open.

#9 In doomhammerhell/pqc-iiot;

· doomhammerhell opened on Mar 6, 2026