-
#### Issue Description
Note: This issue is a refinement of https://github.com/siv-org/siv/issues/193, separating concerns related to CORS and focusing on a potential DoS attack vector.
During re…
-
Based on the procedures page, it appears that the voter's verification number is being randomly generated on their own device. If this is the implementation, then there will always be a chance (howeve…
-
POLYVAL operates on *whole* blocks: https://github.com/Shay-Gueron/AES-GCM-SIV/blob/04b984190fbaf31a31c02ad0cce350a957f48e36/AES_GCM_SIV_256/AES_GCM_SIV_256_Reference_Code/GCM_SIV_c.c#L254
If the m…
-
Hello,
I intend to implement gocryptfs on my local backup server to synchronize it with a remote one via rsync and reverse-mode.
However, the AES-SIV performance is abysmal on such a machine (5-8 …
-
A security.md file is needed to track security changes. Addressing vulnerabilites or issues inthis way contributes to transparency. Example given below:
# Security Policy
## Supported Versions
…
-
Augmentum:
EliteVariety:
;
siv.setImageResource(R…
-
```
SVGImageView doesn't properly scale the image. Even if w o h are changed, it
seems that only takes w and preserves aspect ratio
SVGImageView siv = new SVGImageView(this);
siv.setImageResource(R…
-
```
SVGImageView doesn't properly scale the image. Even if w o h are changed, it
seems that only takes w and preserves aspect ratio
SVGImageView siv = new SVGImageView(this);
siv.setImageResource(R…
-
**Description:**
The current implementation in `pages/api/validate-admin-jwt.ts` logs the JWT contents when a JWT fails validation. This poses a risk of sensitive data exposure, as JWTs often contain…