Post-quantum readiness
Find the crypto that won't age well.
Moving to post-quantum cryptography starts with knowing what you run today. LEA Platform checks every host for legacy algorithms, outdated libraries and weak crypto policies.
Why now
NIST published its first post-quantum cryptography standards (FIPS 203, 204 and 205) in 2024. Migrating takes years, and the first step is an inventory of where legacy cryptography is still in use.
What LEA checks
Scroll sideways to see the full table
| Rule | Platform |
|---|---|
| .NET Framework Strong Cryptography Enabled (32-bit) | Windows |
| .NET Framework Strong Cryptography Enabled (64-bit) | Windows |
| GnuTLS Legacy Protocols Disabled | Linux |
| Java JAR Weak Signature Algorithms Disabled | Linux |
| Java TLS Legacy Protocols and Weak Algorithms Disabled | Linux |
| OpenSSH Version Supports Post-Quantum Key Exchange | macOS, Linux |
| OpenSSL 1.1.1 or 3.x Crypto Baseline | Linux |
| OpenSSL Default Cipher List Excludes Weak Ciphers | macOS, Linux |
| OpenSSL Provides Native ML-KEM (OpenSSL 3.5+) | Linux |
| OpenSSL System Minimum Protocol TLS 1.2 or Higher | Linux |
| SSH Host RSA Key At Least 3072 Bits | macOS, Linux |
| SSH Legacy Algorithms Disabled | macOS, Linux |
| SSH Server Post-Quantum Key Exchange Not Removed | macOS, Linux |
| System Crypto Policy FUTURE or FIPS | Linux |
| System Crypto Policy Not LEGACY | Linux |
| Windows Diffie-Hellman Server Minimum Key Size 2048 Bits | Windows |
| Windows FIPS-Compliant Algorithms Enforced | Windows |
| Windows Legacy SSL/TLS Server Protocols Not Enabled | Windows |
| Windows SChannel RC4 Ciphers Not Enabled | Windows |
| Windows SChannel Triple-DES Cipher Disabled | Windows |
| Windows TLS 1.0 Server Protocol Disabled | Windows |
| Windows TLS 1.1 Server Protocol Disabled | Windows |
| Windows TLS 1.2 Server Protocol Not Disabled | Windows |
From inventory to evidence
Results feed the same evidence snapshots and stakeholder reports as every other rule, so crypto readiness shows up in the CISO report next to everything else.
LEA Platform produces evidence; certification is granted only by an accredited auditor.
FAQ
Try it on your own servers.
30 days, up to 25 endpoints, every feature. We help you install it and agree on success criteria first.