3 ms·
> the scheme to accomplish this was rigorously vetted in a 12-day audit. Vetted by whom? It would help build trust if there was a public report on the strength
by jvehent 11y ago
> the scheme to accomplish this was rigorously vetted in a 12-day audit.
Vetted by whom? It would help build trust if there was a public report on the strength of your implementation available somewhere.
- buu700 11y agoCure53. The report is public on both their website and ours: http://cyph.team/cure53report http://cyph.team/cure53report. (That link contains a page of additional context to explain the findings, e.g. some were pre-production.)
- eganist 11y agoAnd the original, for anyone who wants it straight from Cure53: https://cure53.de/pentest-report_cyph.pdf https://cure53.de/pentest-report_cyph.pdf