diff options
| author | Doan Luu Duc Tai <doan@luuduct.ai> | 2026-10-30 17:24:45 -0500 |
|---|---|---|
| committer | Doan Luu Duc Tai <doan@luuduct.ai> | 2026-10-30 17:24:45 -0500 |
| commit | cf2f0e8c6752c401f152a8e534ba166839d4307e (patch) | |
| tree | a495aee0cbdc111cd9773f7d2d02753cd1d778d5 /docs/CHAT-SECURITY-REVIEW.txt | |
| parent | f196c27faf265cd14d8d7accf58e87b4df3c8a91 (diff) | |
Prove OpenSSL PQ crypto in browser WASI and document the migration
Diffstat (limited to 'docs/CHAT-SECURITY-REVIEW.txt')
| -rw-r--r-- | docs/CHAT-SECURITY-REVIEW.txt | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/docs/CHAT-SECURITY-REVIEW.txt b/docs/CHAT-SECURITY-REVIEW.txt index 7de1d36..4567322 100644 --- a/docs/CHAT-SECURITY-REVIEW.txt +++ b/docs/CHAT-SECURITY-REVIEW.txt @@ -16,7 +16,9 @@ along with this program. If not, see <https://www.gnu.org/licenses/>. CHAT CRYPTOGRAPHY SECURITY REVIEW - Date: 2026-10-30. Status: blocked for deployment and private-message use. + Date: 2026-10-30. Historical review of the initial Rust backend. + The current OpenSSL migration is recorded in CHAT-OPENSSL-MIGRATION.txt. + Private-message use and production deployment are still not ready. Branch: feature/private-chat. Production and main remain unchanged. FIXED REQUIREMENT @@ -24,6 +26,7 @@ FIXED REQUIREMENT Encryption must remain RFC 9980 ML-KEM-1024 + X448 using v6 keys. The compatibility probe pairs it with ML-DSA-87 + Ed448 signatures. No fallback encryption profile is implemented or approved. + The findings below apply to checkpoint 436e217, before the backend change. TEST RESULTS |