diff options
Diffstat (limited to 'docs/CHAT-SECURITY-REVIEW.txt')
| -rw-r--r-- | docs/CHAT-SECURITY-REVIEW.txt | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/docs/CHAT-SECURITY-REVIEW.txt b/docs/CHAT-SECURITY-REVIEW.txt index 7de1d36..4567322 100644 --- a/docs/CHAT-SECURITY-REVIEW.txt +++ b/docs/CHAT-SECURITY-REVIEW.txt @@ -16,7 +16,9 @@ along with this program. If not, see <https://www.gnu.org/licenses/>. CHAT CRYPTOGRAPHY SECURITY REVIEW - Date: 2026-10-30. Status: blocked for deployment and private-message use. + Date: 2026-10-30. Historical review of the initial Rust backend. + The current OpenSSL migration is recorded in CHAT-OPENSSL-MIGRATION.txt. + Private-message use and production deployment are still not ready. Branch: feature/private-chat. Production and main remain unchanged. FIXED REQUIREMENT @@ -24,6 +26,7 @@ FIXED REQUIREMENT Encryption must remain RFC 9980 ML-KEM-1024 + X448 using v6 keys. The compatibility probe pairs it with ML-DSA-87 + Ed448 signatures. No fallback encryption profile is implemented or approved. + The findings below apply to checkpoint 436e217, before the backend change. TEST RESULTS |