12 lines
839 B
Markdown
12 lines
839 B
Markdown
# Audit
|
|
|
|
The library has been audited during Jan-Feb 2023 by an independent security firm [Trail of Bits](https://www.trailofbits.com):
|
|
[PDF](https://github.com/trailofbits/publications/blob/master/reviews/2023-01-ryanshea-noblecurveslibrary-securityreview.pdf).
|
|
The audit has been funded by Ryan Shea. Audit scope was abstract modules `curve`, `hash-to-curve`, `modular`, `poseidon`, `utils`, `weierstrass`, and top-level modules `_shortw_utils` and `secp256k1`. See [changes since audit](https://github.com/paulmillr/noble-curves/compare/0.7.3..main).
|
|
|
|
File in the directory was saved from
|
|
[github.com/trailofbits/publications](https://github.com/trailofbits/publications).
|
|
Check out their repo and verify checksums to ensure the PDF in this directory has not been altered.
|
|
|
|
See information about fuzzing in root [README](../README.md).
|