{
  "algorithms_found": [
    "3DES",
    "AES-256",
    "Ed25519",
    "ML-KEM-768",
    "RSA-2048",
    "Unknown (PEM format)"
  ],
  "files": [
    {
      "algorithms": [
        "ML-KEM-768"
      ],
      "category": "Encrypted File",
      "details": "QNSQY post-quantum encrypted file",
      "path": "./demo-vault/records/patient-export-2019.csv.qs",
      "recommendations": [],
      "risk_description": "Post-quantum safe",
      "risk_level": "Safe",
      "type": "QNSQY (Post-Quantum)"
    },
    {
      "algorithms": [
        "RSA-2048",
        "AES-256"
      ],
      "category": "Encrypted File",
      "details": "GPG encrypted (likely RSA + AES)",
      "path": "./demo-vault/archives/ledger-2021.txt.gpg",
      "recommendations": [
        "RSA-2048: Replace with ML-KEM-768/1024 for encryption or ML-DSA-65/87 for signatures"
      ],
      "risk_description": "Critical (broken by quantum computers)",
      "risk_level": "Critical",
      "type": "GPG Encrypted"
    },
    {
      "algorithms": [
        "RSA-2048",
        "AES-256"
      ],
      "category": "Encrypted File",
      "details": "GPG encrypted (likely RSA + AES)",
      "path": "./demo-vault/archives/patient-export-2019.csv.gpg",
      "recommendations": [
        "RSA-2048: Replace with ML-KEM-768/1024 for encryption or ML-DSA-65/87 for signatures"
      ],
      "risk_description": "Critical (broken by quantum computers)",
      "risk_level": "Critical",
      "type": "GPG Encrypted"
    },
    {
      "algorithms": [
        "Ed25519"
      ],
      "category": "Certificate/Key",
      "details": "",
      "path": "./demo-vault/ssh/id_ed25519.pub",
      "recommendations": [
        "Ed25519: Consider hybrid X25519+ML-KEM-768 for defense-in-depth"
      ],
      "risk_description": "High risk (vulnerable to quantum)",
      "risk_level": "High",
      "type": "SSH Public Key"
    },
    {
      "algorithms": [
        "Ed25519"
      ],
      "category": "Certificate/Key",
      "details": "",
      "path": "./demo-vault/ssh/id_ed25519",
      "recommendations": [
        "Ed25519: Consider hybrid X25519+ML-KEM-768 for defense-in-depth"
      ],
      "risk_description": "High risk (vulnerable to quantum)",
      "risk_level": "High",
      "type": "SSH Private Key"
    },
    {
      "algorithms": [
        "RSA-2048",
        "3DES"
      ],
      "category": "Certificate/Key",
      "details": "PKCS#12 keystore (typically RSA + 3DES/AES)",
      "path": "./demo-vault/certs/backup-identity.p12",
      "recommendations": [
        "RSA-2048: Replace with ML-KEM-768/1024 for encryption or ML-DSA-65/87 for signatures",
        "3DES: Replace with AES-256 or ChaCha20-Poly1305"
      ],
      "risk_description": "Critical (broken by quantum computers)",
      "risk_level": "Critical",
      "type": "PKCS#12 Keystore"
    },
    {
      "algorithms": [
        "Unknown (PEM format)"
      ],
      "category": "Certificate/Key",
      "details": "",
      "path": "./demo-vault/certs/api-gateway-ecdsa.crt",
      "recommendations": [],
      "risk_description": "Medium risk (reduced quantum security)",
      "risk_level": "Medium",
      "type": "PEM Certificate/Key"
    },
    {
      "algorithms": [
        "RSA-2048"
      ],
      "category": "Certificate/Key",
      "details": "",
      "path": "./demo-vault/certs/api-gateway-ecdsa.key",
      "recommendations": [
        "RSA-2048: Replace with ML-KEM-768/1024 for encryption or ML-DSA-65/87 for signatures"
      ],
      "risk_description": "Critical (broken by quantum computers)",
      "risk_level": "Critical",
      "type": "PKCS#8 Private Key"
    },
    {
      "algorithms": [
        "Unknown (PEM format)"
      ],
      "category": "Certificate/Key",
      "details": "",
      "path": "./demo-vault/certs/legacy-server-rsa2048.crt",
      "recommendations": [],
      "risk_description": "Medium risk (reduced quantum security)",
      "risk_level": "Medium",
      "type": "PEM Certificate/Key"
    },
    {
      "algorithms": [
        "RSA-2048"
      ],
      "category": "Certificate/Key",
      "details": "",
      "path": "./demo-vault/certs/legacy-server-rsa2048.key",
      "recommendations": [
        "RSA-2048: Replace with ML-KEM-768/1024 for encryption or ML-DSA-65/87 for signatures"
      ],
      "risk_description": "Critical (broken by quantum computers)",
      "risk_level": "Critical",
      "type": "PKCS#8 Private Key"
    }
  ],
  "report_type": "QNSQY Cryptography Migration Report",
  "scan_path": "./demo-vault",
  "summary": {
    "critical": 5,
    "high": 2,
    "low": 0,
    "medium": 2,
    "safe": 1,
    "total_files": 10
  },
  "timestamp": 1785400438,
  "version": "1.0"
}