// tool reference · Vulnerability & Assessment
AI PQC Analyzer Pro
Quantum-vulnerable crypto inventory and NIST PQC migration plan.
What it does
Inventories the classical cryptography in a codebase or config and rates post-quantum exposure — specifically harvest-now-decrypt-later risk, where data stolen today is decrypted once a cryptographically relevant quantum computer exists.
When to use it
- Planning a crypto migration; answering a due-diligence question about PQC readiness.
Inputs
Field names are the actual form parameters, verified against source.
| Field | Type | Required | Notes |
|---|---|---|---|
| content | textarea | required | Code, config or a cipher inventory. |
| source_type | select | optional | What you pasted. |
| use_ai | checkbox | optional | AI interpretation. |
| authorized | checkbox | required | Authorisation confirmation. |
What you get back
Inventory of RSA/ECDSA/DH usage with exposure rating and migration targets.
Worked example
Input
openssl req -newkey rsa:2048 -x509 -days 3650 ... TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Output (abridged)
HARVEST-NOW-DECRYPT-LATER: HIGH RSA-2048 key exchange, certificate valid 10 years. Traffic captured today is decryptable once a CRQC exists. A 10-year cert means underwriting that risk for a decade. ECDHE gives forward secrecy IF the ephemeral key is discarded -- but the RSA authentication remains quantum-vulnerable. MIGRATION TARGET Key exchange: ECDHE -> hybrid X25519+ML-KEM-768 Signatures: RSA -> ML-DSA-65 Certificate: shorten to <=398 days; swap crypto at renewal. Prioritise data with a long confidentiality lifetime. A session cookie is worthless in 10 years; medical records are not.
How it works
Deterministic pattern inventory, then optional AI narrative.
Limits
Read live from the platform configuration.
| Rate limit | 30 requests / 60s (platform default) |
Limitations — what it does not do
It inventories what you paste. It cannot see a library's internal defaults, a TLS negotiation at runtime, or hardware crypto. Treat it as a starting inventory, not a certified one.
Privacy
Sent to the AI provider when AI is enabled.
Standards
NIST PQC (ML-KEM, ML-DSA)NIST IR 8547