Skip to content

Security: multifactor/MFKDF2.rs

SECURITY.md

Security Policy

This project is maintained by Multifactor, Inc. It is not yet production-ready, so please do not use it in production. Please report any security vulnerabilities to the project maintainers.

Reporting a Vulnerability

If you discover a security vulnerability, please email the project maintainers directly with the details. Your efforts to responsibly disclose your findings are sincerely appreciated.

Known Security Issues

This section lists currently known or recently addressed security issues. Please check here before filing new reports.

Affected Version(s) Description Status CVE / Advisory
0.0.1 RSA Marvin Attack: potential key recovery through timing sidechannels. 🔴 Unresolved 2023-49092

Legend:

  • 🟢 Fixed
  • 🟡 In progress
  • 🔴 Unresolved

There aren’t any published security advisories