Issues

• [SECURITY] MQTT: Unauthenticated key distribution (MITM Vulnerability)

  bugcriticalmqttsecurity
  doomhammerhell/pqc-iiot#14 · Filter by author doomhammerhell opened on Mar 6, 2026

• [BUG] Ratchet: KEM step is non-functional (Broken PCS)

  bugcriticalratchetsecurity
  doomhammerhell/pqc-iiot#13 · Filter by author doomhammerhell opened on Mar 6, 2026

• [BUG] Ratchet: Header metadata is not authenticated (DoS/Desync Risk)

  bugcriticalratchetsecurity
  doomhammerhell/pqc-iiot#12 · Filter by author doomhammerhell opened on Mar 6, 2026

• [SECURITY] Key Provider: Secret Keys (SKs) stored in plaintext

  bugcriticalcryptographysecurity
  doomhammerhell/pqc-iiot#11 · Filter by author doomhammerhell opened on Mar 6, 2026

• [BUG] FOTA: Manifest signature excludes chunk hashes and size (Integrity Risk)

  bugcriticalfotasecurity
  doomhammerhell/pqc-iiot#10 · Filter by author doomhammerhell opened on Mar 6, 2026

• [BUG] Attestation: Quote verification uses swapped parameters (Broken Chain of Trust)

  attestationbugcriticalsecurity
  doomhammerhell/pqc-iiot#9 · Filter by author doomhammerhell opened on Mar 6, 2026