3 ms·
Yeah, that's why I tried to mention right up front that it isn't (yet) audited. I didn't want to give anyone the wrong impression. It's a bit of a chicken-and-e
by vlmutolo 6y ago
Yeah, that's why I tried to mention right up front that it isn't (yet) audited. I didn't want to give anyone the wrong impression. It's a bit of a chicken-and-egg problem, too, where it's hard to justify the expense of an audit if few people use the library, and it's hard to find people to use the library when it isn't audited.
Here's the tracking issue for a first security audit: https://github.com/brycx/orion/issues/21 https://github.com/brycx/orion/issues/21.
Near the bottom of that issue, an employee from NCC reached out and said that they may be interested in funding an audit for Orion, though it's been a couple months and that hasn't gone anywhere (that I know of).
- brycx 6y ago> Near the bottom of that issue, an employee from NCC reached out and said that they may be interested in funding an audit for Orion Small correction: It was actually an employee of Mobilecoin, the company that funded the audits for RustCrypto, which were performed by NCC.