miracl / core

MIRACL Core
Apache License 2.0
199 stars 68 forks source link

Reporting security issues #52

Closed randombit closed 3 years ago

randombit commented 3 years ago

I noticed several side channels in the Rust version of the code during an audit. There is no indication in the readme how such issues should be reported. Should I just create an issue or would you prefer some form of private communication?

mcarrickscott commented 3 years ago

Sure, just email me directly and I will fix them. Thanks!

Mike

On Tue 13 Jul 2021 at 22:15, Jack Lloyd @.***> wrote:

I noticed several side channels in the Rust version of the code during an audit. There is no indication in the readme how such issues should be reported. Should I just create an issue or would you prefer some form of private communication?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/miracl/core/issues/52, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAU3ZDS7G46THRYGONRPAJ3TXSUFVANCNFSM5AKEQMVQ .

randombit commented 3 years ago

Just sent an email to mike.scott@miracl.com