4 ms·
> The SDK has not yet been security reviewed, and the public Blyss service is still in beta. Currently, what are your plans related to security audit both in t
by O__________O 4y ago
> The SDK has not yet been security reviewed, and the public Blyss service is still in beta.
Currently, what are your plans related to security audit both in terms of structuring it and context to you it would make sense?
- blintz 4y agoThe main thing we'd like the security review to focus on is our Rust client code. We'd also really like to select for a reviewing team that has a deep level of familiarity with cryptography. We would provide the team with a summary of the sensitive operations involved in lattice-based key generation, so that lattice experience would not need to be a hard prerequisite to understanding the code.
- O__________O 4y agoWhile likely expensive, when I looked around awhile back, Trail of Bits [1] to me seemed to produce the best audits for cryptographic systems, though possible there are better/cheaper options. [1] https://www.trailofbits.com/ https://www.trailofbits.com/