This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.
Wrote up the SECURITY.md plus a "current status" analysis. The status analysis is the doc I wish more crypto SDKs shipped: an honest table of what's audited, what's not, and what's "implemented but please don't run this in production yet". The threat model section is short. Three lines: The SDK assumes the host machine is not compromised. The SDK does not protect against rubber-hose cryptanalysis.…
Wrote up the SECURITY.md plus a "current status" analysis. The status analysis is the doc I wish more crypto SDKs shipped: an honest table of what's audited, what's not, and what's "implemented but please don't run this in production yet".
The threat model section is short. Three lines:
- The SDK assumes the host machine is not compromised.
- The SDK does not protect against rubber-hose cryptanalysis.
- Anyone running this on devnet, sweet. Anyone running this with mainnet money, talk to me first.
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.