Adding audit report reference to README + licenses (#253)

This commit is contained in:
Kevin Lewi
2021-12-13 15:29:06 -08:00
committed by GitHub
parent adbd50f523
commit d59d0b775b
3 changed files with 206 additions and 0 deletions
+7
View File
@@ -29,6 +29,13 @@ opaque-ke = "0.6.0"
Rust **1.51** or higher.
Audit
-----
This library was audited by NCC Group in June of 2021. The audit was sponsored by WhatsApp for its use in [enabling end-to-end encrypted backups](https://engineering.fb.com/2021/09/10/security/whatsapp-e2ee-backups/).
The audit found issues in release `v0.5.0`, and the fixes were subsequently incorporated into release `v1.2.0`. See the [full audit report here](https://research.nccgroup.com/2021/12/13/public-report-whatsapp-opaque-ke-cryptographic-implementation-review/).
Resources
---------