diff options
| author | Doan Luu Duc Tai <doan@luuduct.ai> | 2026-10-30 17:24:45 -0500 |
|---|---|---|
| committer | Doan Luu Duc Tai <doan@luuduct.ai> | 2026-10-30 17:24:45 -0500 |
| commit | 7a0ce2805258e8ac061202904379692d53d5dc95 (patch) | |
| tree | a495aee0cbdc111cd9773f7d2d02753cd1d778d5 /docs/CHAT-SECURITY-REVIEW.txt | |
| parent | 436e217c7858888702d2b6d9e655597ccadb7281 (diff) | |
Prove OpenSSL PQ crypto in browser WASI and document the migrationfeature/private-chat
Diffstat (limited to 'docs/CHAT-SECURITY-REVIEW.txt')
| -rw-r--r-- | docs/CHAT-SECURITY-REVIEW.txt | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/docs/CHAT-SECURITY-REVIEW.txt b/docs/CHAT-SECURITY-REVIEW.txt index 7de1d36..4567322 100644 --- a/docs/CHAT-SECURITY-REVIEW.txt +++ b/docs/CHAT-SECURITY-REVIEW.txt @@ -16,7 +16,9 @@ along with this program. If not, see <https://www.gnu.org/licenses/>. CHAT CRYPTOGRAPHY SECURITY REVIEW - Date: 2026-10-30. Status: blocked for deployment and private-message use. + Date: 2026-10-30. Historical review of the initial Rust backend. + The current OpenSSL migration is recorded in CHAT-OPENSSL-MIGRATION.txt. + Private-message use and production deployment are still not ready. Branch: feature/private-chat. Production and main remain unchanged. FIXED REQUIREMENT @@ -24,6 +26,7 @@ FIXED REQUIREMENT Encryption must remain RFC 9980 ML-KEM-1024 + X448 using v6 keys. The compatibility probe pairs it with ML-DSA-87 + Ed448 signatures. No fallback encryption profile is implemented or approved. + The findings below apply to checkpoint 436e217, before the backend change. TEST RESULTS |