README: update security section

This commit is contained in:
Paul Miller 2023-08-29 12:36:11 +00:00
parent 5c477a88fa
commit 4743182bf7
No known key found for this signature in database
GPG Key ID: 697079DA6878B89B

@ -850,12 +850,12 @@ utils.equalBytes(Uint8Array.from([0xde]), Uint8Array.from([0xde]));
The library has been independently audited: The library has been independently audited:
- in Feb 2023 by [Trail of Bits](https://www.trailofbits.com): - in Feb 2023, by [Trail of Bits](https://www.trailofbits.com). See
[PDF](https://github.com/trailofbits/publications/blob/master/reviews/2023-01-ryanshea-noblecurveslibrary-securityreview.pdf). [PDF](https://github.com/trailofbits/publications/blob/master/reviews/2023-01-ryanshea-noblecurveslibrary-securityreview.pdf)
The audit has been funded by [Ryan Shea](https://www.shea.io). and [changes since audited v0.7.3](https://github.com/paulmillr/noble-curves/compare/0.7.3..main).
Audit scope was abstract modules `curve`, `hash-to-curve`, `modular`, `poseidon`, `utils`, `weierstrass`, - Scope: abstract modules `curve`, `hash-to-curve`, `modular`, `poseidon`, `utils`, `weierstrass` and
and top-level modules `_shortw_utils` and `secp256k1`. top-level modules `_shortw_utils` and `secp256k1`
See [changes since v0.7.3 audit](https://github.com/paulmillr/noble-curves/compare/0.7.3..main). - The audit has been funded by [Ryan Shea](https://www.shea.io)
It is tested against property-based, cross-library and Wycheproof vectors, It is tested against property-based, cross-library and Wycheproof vectors,
and has fuzzing by [Guido Vranken's cryptofuzz](https://github.com/guidovranken/cryptofuzz). and has fuzzing by [Guido Vranken's cryptofuzz](https://github.com/guidovranken/cryptofuzz).