Security

SECURITY.md

Security Policy

Status

Educational/research implementation. NOT audited for production use.

Algorithms

Component	Algorithm	NIST Status
Signatures	Falcon-512	PQC Round 3
Hashing	SHA3-256	FIPS 202
Encryption	Kyber-1024	PQC Selected
Cipher	ChaCha20-Poly1305	RFC 8439

Reporting Vulnerabilities

Create a draft security advisory on GitHub. Do not open public issues.

Include:

Description
Reproduction steps
Impact assessment
Affected versions

Warnings

Wallet files contain encrypted private keys
Never commit wallet files to version control
Demo passwords are insecure
API has no authentication - use firewall rules
Keep software updated

Best Practices

Use strong passwords (20+ characters)
Store wallet backups offline
Restrict API access with firewall
Never hardcode passwords
Regular database backups

Audit Status

Not audited. For educational/research use only.

Resources

Last Updated: 2025-12-25

There aren’t any published security advisories