Skip to content

SECURITY.adoc

Latest commit

 

History

History
41 lines (29 loc) · 981 Bytes

SECURITY.adoc

File metadata and controls

41 lines (29 loc) · 981 Bytes
Raw

Security Policy

Supported Versions

Version Supported

main

✅

Reporting a Vulnerability

To report a security vulnerability, please use GitHub’s private vulnerability reporting feature:

  1. Go to the Security tab of this repository

  2. Click “Report a vulnerability”

  3. Provide details about the vulnerability

Do not open public issues for security vulnerabilities.

Security Measures

This project follows the Hyperpolymath security standards:

  • SPDX license headers on all files

  • SHA-pinned GitHub Actions

  • CodeQL analysis enabled

  • OpenSSF Scorecard monitoring

  • Branch protection enabled

Cryptographic Standards

This project adheres to CRYPTO-STANDARD.scm:

  • Password hashing: Argon2id

  • General hashing: BLAKE3

  • Post-quantum signatures: Dilithium5 (ML-DSA-87)

  • Post-quantum key exchange: Kyber-1024 (ML-KEM-1024)

  • Classical signatures: Ed448 (Ed25519 acceptable for SSH)